Tips: Safe Online Holiday Shopping From The Office

  • Nov 24, 2009

A new national survey from ISACA shows employees plan to spend the equivalent of nearly two full work days shopping for the holidays using work computers, creating personal and business security risks.

“Online shopping can open the door to viruses, spam and phishing attacks that invade the workplace and cost enterprises thousands per employee in lost productivity and potentially millions in destruction or compromise of corporate data,” said John Pironti, a member of ISACA’s Certification Task Force and chief information risk strategist at Archer Technologies.

Tips for companies include:

1. Educate employees. Blocking sites can do more harm than good, causing employees to seek out less secure ways to get around your blockade.

2. Get employees on board with learning by teaching them how to protect their work and home computers.

3. Reinforce what you teach by having employees sign an acceptable-use policy every year.

4. Offer a “safe zone” for holiday shopping -- create a virtual sandbox that can be taken down after the holidays.

5. Don’t wait until Cyber Monday to step up security. Many employees begin shopping much earlier.

Tips for online shoppers include:

1. Use your desktop PC, not your mobile device, because your desktop browser is likely to be more secure.

2. Protect sensitive information by password-protecting both your mobile device and its memory card.

3. Update your anti-virus and anti-malware programs continually.

4. Treat social networking sites with the same caution as other Web sites -- they are a growing target for fraudsters and virus writers.

5. Be cautious of special offers from unfamiliar sites. Fake online offers and coupons may lead to harmful sites, so be suspicious.

Featured

  • Ransomware Attacks Rise for the First Time in Six Months

    Ransomware attacks have risen for the first time in six months, increasing by 28% month-on-month to 421 attacks. While overall attack volume remained below 500, the uptick may signal a renewed escalation heading into the year’s most active period for cyber criminals. Read Now

  • Report: 47 Percent of Security Service Providers Are Not Yet Using AI or Automation Tools

    Trackforce, a provider of security workforce management platforms, today announced the launch of its 2025 Physical Security Operations Benchmark Report, an industry-first study that benchmarks both private security service providers and corporate security teams side by side. Based on a survey of over 300 security professionals across the globe, the report provides a comprehensive look at the state of physical security operations. Read Now

    • Guard Services

  • Identity Governance at the Crossroads of Complexity and Scale

    Modern enterprises are grappling with an increasing number of identities, both human and machine, across an ever-growing number of systems. They must also deal with increased operational demands, including faster onboarding, more scalable models, and tighter security enforcement. Navigating these ever-growing challenges with speed and accuracy requires a new approach to identity governance that is built for the future enterprise. Read Now

  • Eagle Eye Networks Launches AI Camera Gun Detection

    Eagle Eye Networks, a provider of cloud video surveillance, recently introduced Eagle Eye Gun Detection, a new layer of protection for schools and businesses that works with existing security cameras and infrastructure. Eagle Eye Networks is the first to build gun detection into its platform. Read Now

  • Report: AI is Supercharging Old-School Cybercriminal Tactics

    AI isn’t just transforming how we work. It’s reshaping how cybercriminals attack, with threat actors exploiting AI to mass produce malicious code loaders, steal browser credentials and accelerate cloud attacks, according to a new report from Elastic. Read Now

Most   Popular

New Products

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction.

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.