According to a CroudStrike survey, 52% of employees telecommuting during confinement said their employer did not give them additional training against cyber threats. The study’s findings also indicate that, despite the growing number of cyber threats surrounding the pandemic, business leaders believed that their companies were no more at risk of being attacked than normal. They therefore did not take the trouble to properly educate their employees about the new threats that they may face.
“The results of this survey show that, in their haste to fire their employees to continue their activities from home, French companies have exposed themselves to a considerable risk of being confronted with a disaster in terms of cybersecurity,” said Joël Mollo , Senior Director Southern Europe at CrowdStrike “Employees using their own devices can open the door to many problematic cases, not only for employees, but also for their business. Does it have the capacity to monitor and protect its employees from threats while ensuring the confidentiality of the data on a personal device (and the data of the company we are working on) likely to be used by the whole family? “
Here are the key figures from the survey:
- telework is more widely implemented in SMEs. If 73% of the employees of large companies have practiced teleworking more during confinement, only 35% of the employees of PME declare having teleworked more during this same period;
- employees working for large companies are more likely to have professional terminals, laptops, smartphones, etc. than those in SMEs (68% versus 38%). However, the proportion of employees in large companies (55%) and SMEs (56%) who have used their personal devices is almost identical;
- 68% of large companies have provided additional training on the risks associated with teleworking (such as ensuring that you are on a secure wifi network, learning to identify phishing attempts by e-mail, online scams, links compromise, etc.) against only 30% of SMEs and 59% in mid-sized companies;
- while 93% of employees in large companies believe their devices are protected from the main existing security threats, 64% nevertheless believe that their organization is more likely to be attacked during the coronavirus crisis than before. Is this feeling due to the fact that they were more aware of the risks or do they consider that a large company is more targeted than an SME? Because in SMEs, 82% of employees think they are protected, but only 24% believe that their company is more at risk.