The end of Q3 is nearing along with the end of school holidays which means (a less) uninterrupted focus on all things office. This month we look at potential hidden dangers in your smart office and a look at how AI has been transforming ransomware.
IoT & office security
The IoT has been transformative and these days your office thermostat, conference room speaker and smart badge reader are likely all connected to your Wi-Fi. This brings convenience but they are all potential gateways into your network which means they needed to be connected securely and monitored regularly to help keep your data safe. Here are some handy hints:
- Make sure you know what you have by recording all items with any connection to the internet and who uses them. Be sure to regularly check if any devices have been added (even a smart coffee machine!) and ensure a simple approval process
- Change default passwords immediately to something strong and unique and store them securely where your team can access them
- Segment your network creating separate wireless networks or VLANs for IoT gear and block IoT devices from accessing sensitive servers – limit what each device can access and turn off / block unnecessary access
- Make sure firmware and software updates are automated as much as possible and, where not, implement and diarise regular checks. Devices no longer supported should be replaced
- Monitor traffic and logs to spot unexpected activity that could be a sign of unauthorised access
- Incorporate a response plan into your BCDR such as how to isolate a device, allowing you to respond quickly
Ransomware
We often cover the numerous ways that hackers can attempt to compromise you and your business and there have been plenty of press stories about high profile attacks including ransomware. It seems now that there is some evolution in ransomware with this Industrial Cyber News article citing Check Point Software Technologies highlighting that various groups are employing AI to help evolve their attacks following law enforcement actions. Whilst the fact that bad actors just keep trying might all seem a bit overwhelming, don’t panic! Good cyber hygiene and ongoing training will all help you and your business stay safe.
