COVID-19: Strategies to Stay Secure and Ensure Business Continuity

COVID-19
Strategies to Stay Secure and
Ensure Business Continuity
Proprietary and CONFIDENTIAL. Do Not Distribute. © 2020 Optiv Security Inc. All Rights Reserved.

In uncertain times, it's reassuring to know
that there are still things you can impact
and control.
Optiv is commi ed to guiding you through
these shi ing times by providing strategies
to keep your organization and employees
secure while ensuring business continuity.
TECHNOLOGY
• Closing the Remote Gap
• VPN Rationing
• Flexibility Mindset
• Endpoint Connectivity Strategy
• Encryption Best Practices
• Facility Networks
PEOPLE
• Eavesdropper Awareness
• Official Email Alias
• Work from Home (WFH) Best Practices
• Combating Disinformation
• Awareness Training
• Remote Meetings Strategy
To read our response to the COVID-19 pandemic, as well as other resources and actionable checklists,
please visit optiv.com/covid-19-response.

The increased use of video
conferencing solutions in today’s
WFH environment has resulted
in a ackers ‘squa ing’ on random
or known meeting IDs to listen in
on potentially confidential
conversations and meetings.
WHAT YOU CAN DO
• Set a meeting password
• Require a endees to announce/register themselves
• Receive email notifications if a endees are waiting for
you to “start” a meeting
• Manually verify who a ends the calls
And you were worried about people noticing the
framed Shrek poster in your home office.
1800BADACTORJill SmithCarla LaRue
Pat Lipule Kelsey Reynolds
Leave Meeting
Pamela Griggs
Andrea Sullivan Michael R. FergesunColin Black
Learn More
White Paper

facilisis metus
ssa. Proin
bortis nisl ac
ula.
ompany.com
es@company.com
Sent: Thursday, April 2
Sectetuer
adipiscing elit, sed
diam nonummy
nibh euismod
tincidunt ut laoreet
dolore magna
Sed diam
nonummy nibh
euismod tincidunt
ut laoreet dolore
magna
From: HR@company.com
To: Employees@company.com
Integer lectus ante,
vehicula eu nulla
et, volutpat porta
mauris. Nulla sit
amet nunc vel justo
sollicitudin
imperdiet id auctor
eu est.
Create an email
alias so employees
can easily identify
official corporate
communications
related to how the
virus is affecting
the company.
Learn More
WFH Security Checklist

ANATOMY OF A GOOD WORKING FROM HOME ENVIRONMENT
Sit in a chair at a desk
Leverage an external monitor
Use a headset with a
microphone for meetings
Respect your office space
(dedicated area for work-related
items only to maintain its purpose)
Learn More

Be aware of COVID-19
disinformation campaigns
Learn More

Ensure that WFH employees are aware of increases in:
SOCIAL
ENGINEERING
SPEAR
PHISHING
UNEXPECTED
MFA/2FA
PROMPTS
PHONE
PRETEXTING
COVID-19
DISINFORMATION
CAMPAIGNS
Learn More

REMOTE COLLABORATION
MEETING SOLUTION
Ensure team members know
how to use the solution
Determine the total number of
users the solution will support
Learn More

If the userbase is exceeding capacity,
a VPN rationing schedule can be
established where employees are either
recommended or required to access
the VPN during known windows
based on their job function.
For example, employees that can perform their work offline
most of the day can login to the VPN after core business hours.
Additional guidance can also be given to be mindful of
bandwidth usage and avoid large file transfers through the
VPN when possible.
8:00
Fri 3/27/20
9:00
10:00
1:00
3:00
VPN allotment #1
VPN allotment #2
Walk the dog
Virtual lunch w/ Carla
Work on projects offline
Exercise
WFH Schedule
6:00
Learn More
White Paper

According to research by the consulting ﬁrm
Global Workplace Analytics, the amount of
work done remotely increased 173% in the
last 15 years.
2005 2020
And 3.6% of the total United States
workforce works from home at least
half-time under normal circumstances.
That’s 5,760,000
people, or more
than the population
of Minnesota.
Source: https://globalworkplaceanalytics.com/telecommuting-statistics
Learn More
White Paper

Adopt a Flexible Mindset
Shorten the normal
testing cycle and change
management to match
production changes.
Provide the best level of
risk assurance possible
given current conditions.
Clearly explain the
threats and risks that
the organization
might encounter.
Consider your
response plan to
adapt to all changes
in circumstance.
Tip: Get a slinky for your home office
Learn More
White Paper

Closing the Remote Gap
1. EXPANDING WHAT YOU HAVE
EMERGENCY VPN PLAN
Avoid large
file transfers
Get more
licenses
Use virtual
editions of apps
Limit access to
sensitive tools
Learn More
White Paper

2. CREATE DIFFERENT METHODS OF ACCESS
Leverage existing solutions for internet-facing
applications as a template, then employ what
you can quickly and securely integrate from
any perimeter monitoring perspectives.
• Low-risk applications
• SSL browser proxies
• Multi-factor authentiaction
Learn More
White Paper

3. CHANGE YOUR ARCHITECTURE
There are emerging technologies that have a
great deal of scale, flexibility and have better
policy controls than traditional VPN solutions.
• Software-defined perimeter (SDP)
• Software-defined wide area network (SD-WAN)
• Secure access service edge (SASE)
Learn More
White Paper

A STRATEGY FOR ENDPOINT CONNECTIVITY TO NETWORKS
BEST
Company-managed and
compliant endpoint BETTER
BYOD endpoint connecting to a
company-managed virtual desktop
infrastructure (VDI) instance
GOOD
Bring your own device (BYOD)
endpoint validated to meet
baseline security posture
Learn More

Ensure Corporate
Devices Have Drive
Encryption Enabled in
Case of Loss or Theft
Learn More

Consider disabling guest
WiFi and any other wireless
access that is not well
secured as users will not be
available to spot suspicious
loitering around your facility.
Learn More

To read our response to the COVID-19 pandemic, as well as other resources and
actionable checklists, please visit optiv.com/covid-19-response.

COVID-19: Strategies to Stay Secure and Ensure Business Continuity

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a COVID-19: Strategies to Stay Secure and Ensure Business Continuity

Semelhante a COVID-19: Strategies to Stay Secure and Ensure Business Continuity (20)

Último

Último (20)

COVID-19: Strategies to Stay Secure and Ensure Business Continuity