Collector - April 2021 - 20

" I would say phishing these days
is probably the top risk out there, "
McManamon said. " Many attacks work
through email. If users have access to
email and click on a link they shouldn't
click on, hackers can get back into the
depths of the company's networks and
start harvesting data or, worse, initiate a
ransomware attack. The recent SolarWinds
breach is a great example that impacted
and allowed access to numerous Office365
email accounts. "
We also saw this play out in July 2020,
when hackers broke into Twitter's internal
systems by calling employees who were
working from home and claiming to be from
Twitter's IT department.
According to a report from the New York
Department of Financial Services, " The
hackers claimed they were responding to a
reported problem the employee was having
with Twitter's VPN. Since switching to remote

working, VPN problems were common at
Twitter. The hackers then tried to direct the
employee to a phishing website that looked
identical to the legitimate Twitter VPN website
and was hosted by a similarly named domain.
As the employee entered their credentials
into the phishing website, the hackers would
simultaneously enter the information into
the real Twitter website. This false log-in
generated an MFA notification requesting that
the employees authenticate themselves, which
some of the employees did. "
The result? Multiple high-profile Twitter
accounts-Jeff Bezos, Barack Obama, Bill
Gates and more-were taken over by hackers
promoting a bitcoin scam.
That's why ongoing training on security
best practices is your ticket to a more secure
system. Your employees should be regularly
tested on their ability to spot a scam,
whether it comes to them via email, phone
or online.

One TECH LOCK customer had an
employee who used their work computer
to try to register a new TV on the
manufacturer's website. The employee
clicked on a fake website spoofing the
manufacturer and wound up installing a
piece of malware on their computer. Once
scammers have access to your computer,
they can do pretty much anything,
including capturing all your information
and logging keystrokes and passwords,
which puts the company in jeopardy.
" While it might first appear that additional
security education isn't necessary for workfrom-home employees if you've already
had in-office security education, the reality
is that it's not the same environment-the
threats are different, the methods of attack
are different, " Kujawa said.  " The bubble of
security created by a company's IT/security
teams is often only effective inside of the
office. We need more employers to realize

STATE RULES

We've seen remote work data security guidance issued for several states during the pandemic.

WASHINGTON
Employers must:

MARYLAND

* Maintain a list of employees
working in a " virtual office, "
an equipment list and details
of the necessary employee
remote work agreement.

Employers must:
* Ensure employees use a
secure workspace, protect
personal information
as required by law, and
have the appropriate
technological security
measures and physical
safeguards in place.

* Have employees working offsite sign an agreement that
outlines data security and
call review requirements.
* Maintain call recordings
for at least four years and
regularly monitor calls, a
portion of which must be
in real time.

IDAHO

Employers must:
* Ensure employees access the
company's secure origination system
from any out-of-office device through
the use of a VPN or other system
that requires passwords or an
identification authentication.

20

* Implement a security
program and address
known vulnerabilities.

* Maintain any updates in order to keep
information and devices secure.

* Conduct remote access
and data security risk
assessment.

* Exercise due diligence in the
safeguarding of company and
customer data.

ACAINTERNATIONAL.ORG


http://www.ACAINTERNATIONAL.ORG

Collector - April 2021

Table of Contents for the Digital Edition of Collector - April 2021

Collector - April 2021 - Cover1
Collector - April 2021 - Cover2
Collector - April 2021 - 1
Collector - April 2021 - 2
Collector - April 2021 - 3
Collector - April 2021 - 4
Collector - April 2021 - 5
Collector - April 2021 - 6
Collector - April 2021 - 7
Collector - April 2021 - 8
Collector - April 2021 - 9
Collector - April 2021 - 10
Collector - April 2021 - 11
Collector - April 2021 - 12
Collector - April 2021 - 13
Collector - April 2021 - 14
Collector - April 2021 - 15
Collector - April 2021 - 16
Collector - April 2021 - 17
Collector - April 2021 - 18
Collector - April 2021 - 19
Collector - April 2021 - 20
Collector - April 2021 - 21
Collector - April 2021 - 22
Collector - April 2021 - 23
Collector - April 2021 - 24
Collector - April 2021 - 25
Collector - April 2021 - 26
Collector - April 2021 - 27
Collector - April 2021 - 28
Collector - April 2021 - 29
Collector - April 2021 - 30
Collector - April 2021 - 31
Collector - April 2021 - 32
Collector - April 2021 - 33
Collector - April 2021 - 34
Collector - April 2021 - 35
Collector - April 2021 - 36
Collector - April 2021 - 37
Collector - April 2021 - 38
Collector - April 2021 - 39
Collector - April 2021 - 40
Collector - April 2021 - 41
Collector - April 2021 - 42
Collector - April 2021 - 43
Collector - April 2021 - 44
Collector - April 2021 - 45
Collector - April 2021 - 46
Collector - April 2021 - 47
Collector - April 2021 - 48
Collector - April 2021 - Cover3
Collector - April 2021 - Cover4
http://online.collector.com/collectormagazine/202104
http://online.collector.com/collectormagazine/202103
http://online.collector.com/collectormagazine/202102
http://online.collector.com/collectormagazine/202101
http://online.collector.com/collectormagazine/202012
http://online.collector.com/collectormagazine/202011
http://online.collector.com/collectormagazine/202010
http://online.collector.com/collectormagazine/202009
http://online.collector.com/collectormagazine/202008
http://online.collector.com/collectormagazine/202007
http://online.collector.com/collectormagazine/202006
http://online.collector.com/collectormagazine/202005
http://online.collector.com/collectormagazine/202004
http://online.collector.com/collectormagazine/202003
http://online.collector.com/collectormagazine/202002
http://online.collector.com/collectormagazine/202001
http://online.collector.com/collectormagazine/201912
http://online.collector.com/collectormagazine/201911
http://online.collector.com/collectormagazine/201910/
http://online.collector.com/collectormagazine/201909/
http://online.collector.com/collectormagazine/201908/
http://online.collector.com/collectormagazine/201907/
http://online.collector.com/collectormagazine/201906/
http://online.collector.com/collectormagazine/201905/
http://online.collector.com/collectormagazine/201904/
http://online.collector.com/collectormagazine/201903/
http://online.collector.com/collectormagazine/201902/
http://online.collector.com/collectormagazine/201901/
http://online.collector.com/collectormagazine/201812/
http://online.collector.com/collectormagazine/201811/
http://online.collector.com/collectormagazine/201810/
http://online.collector.com/collectormagazine/201809/
http://online.collector.com/collectormagazine/201808/
http://online.collector.com/collectormagazine/201807/
http://online.collector.com/collectormagazine/201806/
http://online.collector.com/collectormagazine/201805/
http://online.collector.com/collectormagazine/201804/
http://online.collector.com/collectormagazine/201803/
http://online.collector.com/collectormagazine/201802/
http://online.collector.com/collectormagazine/201801/
http://online.collector.com/collectormagazine/201712/
http://online.collector.com/collectormagazine/201711/
http://online.collector.com/collectormagazine/201710/
http://online.collector.com/collectormagazine/201709/
http://online.collector.com/collectormagazine/201708/
http://online.collector.com/collectormagazine/201707/
http://online.collector.com/collectormagazine/201706/
http://online.collector.com/collectormagazine/201705/
http://online.collector.com/collectormagazine/201704/
http://online.collector.com/collectormagazine/201703/
http://online.collector.com/collectormagazine/201702/
http://online.collector.com/collectormagazine/201701/
http://online.collector.com/collectormagazine/201612/
http://online.collector.com/collectormagazine/201611/
http://online.collector.com/collectormagazine/201610/
http://online.collector.com/collectormagazine/201609/
http://online.collector.com/collectormagazine/201608/
http://online.collector.com/collectormagazine/201607/
http://online.collector.com/collectormagazine/201606/
http://online.collector.com/collectormagazine/201605/
http://online.collector.com/collectormagazine/201604/
http://online.collector.com/collectormagazine/201603/
http://online.collector.com/collectormagazine/201602/
http://online.collector.com/collectormagazine/201601/
http://online.collector.com/collectormagazine/201512/
http://online.collector.com/collectormagazine/201511/
http://online.collector.com/collectormagazine/201510/
http://online.collector.com/collectormagazine/201509/
http://online.collector.com/collectormagazine/201508/
http://online.collector.com/collectormagazine/201507/
https://www.nxtbookmedia.com