Recent events turned our working lives upside down. With very little notice, millions of people around the world were sent home from their offices to suddenly adopt a remote work lifestyle. Four months into this adventure, most knowledge workers have adapted to working styles that replace conference rooms with video meetings and coffee chats with virtual happy hours.

I believe that we’ve arrived at a new normal where remote work will become a standard arrangement for knowledge workers. Both companies and employees will benefit from this approach. While employees can better balance their lives, companies will be able to reduce overhead expenses by consolidating and eliminating expensive physical offices. This work style comes with new cybersecurity considerations, and I urge organizations to adopt six key practices to adapt to our new working patterns.

As organizations across the country have moved to remote work models, many have reported an increase in cyberattacks. Cybercriminals, it seems, are taking advantage of the public health crisis to exploit security vulnerabilities in home-based computer systems. What can organizations do to minimize the chances that their shift to remote work results in an expensive breach? We recommend a multipronged approach that combines the use of security tools and end-user education.

The global pandemic and social distancing measures have redefined the office for many people. Industries that never would have considered allowing their office employees to work from home were forced to rethink decades of business as usual.

This change has also brought new technology needs. Since these businesses had built technology infrastructures that relied on traditional network and application architecture, a shift had to occur. Suddenly, IT departments were dealing with overloaded VPNs or having to deploy a VPN that they never had to maintain before. Compound that with the fact that users are now accessing company resources from networks or assets that corporate IT has no control over, that most home routers are still vulnerable to exploitation and that, in many cases, the network gates were flung open in the name of productivity ― it’s enough to give any CISO an ulcer.

So how can companies mitigate these risks? Now that everyone is settling into a routine and we’re adjusting to this “new normal,” it’s an ideal time to reach out to your users and talk about security.

Is Microsoft a security company? The idea has been on my mind for a while. I think back to the days of my early Microsoft experiences. For me, that would be Windows 3.1 and DOS 5.0 up to DOS 6.22. It was the base of my conquest for co-sysop on a few dial-up BBSs (bulletin boards), getting really good download ratios, and finding all the sweet “warez”. I was also digging through every inch of my computer. Today, in my role as a Microsoft 365 pre-sales architect, I give even more thought to the security aspects of Microsoft’s environment.

The election infrastructure in the U.S. depends on the coordinated, secure interaction of thousands of state and local election officials using very different technologies. These range from large cities with fully electronic voting systems to small municipalities that still rely on paper ballots. As I work with officials from these diverse election authorities, I’ve developed a set of best practices that will enhance security in any election environment. Let’s take a look at five key measures that every Board of Elections should put in place.

Endpoints are on the front lines of every cybersecurity program. Laptops, smartphones, tablets and other end-user devices travel around the world, connecting to a variety of networks with varying degrees of security control. These devices require strong protections to ensure that they don’t become compromised and serve as the launching point for a broader attack on an organization. Next-generation endpoint protection platforms provide the 24/7 control required to keep an organization’s diverse set of devices safe and secure.