Intelligent CIO North America Issue 13 | Page 54

FEATURE : MODERN WORKPLACE

UNFORTUNATELY , PARTS OF SECURITY EDUCATION AND TRAINING JUST AREN ’ T WORKING . a malicious app that runs a malicious script on a local PC or corporate server . It encrypts data and then spreads to other PCs and servers . In the cloud , there are two ways to encrypt SaaS data . The first is through a syncing app that connects your local device with your cloud environment . The second is through a malicious OAuth app or browser extension with access to your SaaS data via API . More on best practices for detecting and preventing cloud ransomware later . a prime target for attackers . Additionally , it ’ s much harder to monitor employees ’ activities outside of the office and thus , more challenging to mitigate potential attacks . Lastly , employees ’ increasing use of unprotected home computers and Wi-Fi routers with default passwords provides many new ransomware opportunities for bad actors .

But what ’ s the difference between an attack on a corporate network vs . the cloud ? A ransomware attack on a corporate network usually occurs in the form of
So how can companies limit the impact of infections on remote workforce devices ? Today , many device management tools allow you to install VPNs or antimalware software remotely , create security policies , prevent employees from visiting suspicious websites , and monitor and manage employee devices – often from one centralized cloud-based dashboard . On top of that , you need to implement an activity log monitoring solution that uses AI to intelligently scan and identify behavior anomalies such as abnormal GeoIP login , brute force attacks , etc . For
54 INTELLIGENTCIO NORTH AMERICA www . intelligentcio . com