Kaspersky research reveals how ex-employees share data and more – Times of India

Kaspersky has released a new study on the behaviour of small and medium businesses during the crisis that shows staff reduction can cause additional cybersecurity risks. As per the report, only 50% of organisations’ leaders are confident their ex-employees don’t have access to the company’s data stored in cloud services. In addition, around 51% of organisations are sure that former workers can’t use corporate accounts.
Kaspersky surveyed more than 1,300 business leaders in small and medium-sized organizations to learn what tactics they chose to keep their business afloat, and what cybersecurity risks anti-crisis measures could bring. According to the study, “team retention was the top priority for almost half of organisations throughout the pandemic, many businesses still might have to resort to job cuts in order to reduce costs during hard times”.
The report further suggests that around half of the leaders were unable to confirm confidently that their ex-employees don’t have access to their company’s digital assets. The report further claims that “ex-employees misuse of data in new jobs or to drum up business for themselves were major concerns for bosses”.
Employers, as per the report, are worried that around 87% of former employees will share their data with new employers. And, around 80% of employees use their database to launch their own businesses. Apart from that, around 30% of respondents consider reductions in employment as a possible measure to cut costs in case of a crisis.
Other popular cost-cutting steps include a decrease in spending on advertising and promotion (41,38%) and vehicles (38,42%). Cybersecurity, on the other hand, appeared not to be an area of the business where leaders would prefer to save budget.
To make sure that uncontrolled access and shadow IT won’t affect your company’s efficiency and security, Kaspersky recommends the following steps:
Keep control of the number of people with access to crucial corporate data, reducing the amount of data available to all employees. Breaches are more likely to occur in organizations where too many employees work with confidential valuable information that can be sold or somehow used.
Set up a policy for access to corporate assets, including email boxes, shared folders, and online documents. Keep it up to date and remove access if an employee leaves the company. Use cloud access security broker software that helps manage and monitor employee activity within cloud services and enforces security policies;
Make regular backups of essential data to ensure corporate information stays safe in case of emergency;
Provide clear guidelines on the usage of external services and resources. Employees should know which tools they should or shouldn’t use and why. When switching to any new software for work, there should be a clear procedure of approval with IT and other responsible roles.
Encourage employees to have strong passwords for all digital services they use and to change passwords regularly;
Regularly remind staff about the importance of following basic cybersecurity rules relating to the safe account and password management, email security, and web browsing. A comprehensive training program will allow your workers not only to gain the necessary knowledge but also to apply it in practice;
Employ dedicated cybersecurity services which provide visibility over cloud services, such as Kaspersky Endpoint Security Cloud.

For all the latest Technology News Click Here 

 For the latest news and updates, follow us on Google News

Read original article here

Denial of responsibility! TechNewsBoy.com is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.