When equipped with the right tools, the hybrid workforce are proving themselves to be effective from further afield - but while this might be great news for employees; it means a rapidly growing challenge for business leaders.

Pre-2020, endpoint security wasn’t a priority even among the most security-conscious businesses. This is because endpoints were nearly universally kept onsite – so as long as server locations were properly protected, endpoints were too.

However, company endpoints are no longer all kept onsite. Instead, an interconnected web of mobiles, desktops, laptops, printers, and IoT devices are now being used in homes, cafés, and even on trains.

But while company data can be accessed by each of these devices, IT teams can’t always keep them all accounted for – meaning they can’t be properly protected. This is compounded by the fact that these devices are only growing in number and many are designed only for basic antivirus (AV) and next-generation antivirus (NGAV), rather than the multiple layers of security required to repel modern cyber-threats.

With so many new points of entry, hackers are spoilt for choice when it comes to ransomware and phishing targets; with the latter comprising 41% of all security incidents. Worse still, by infiltrating devices with outdated security, hackers are now able to infiltrate company VPNs – giving them access to data across entire corporate networks, meaning enormous potential damage to any business handling sensitive information.  

Antivirus software can’t protect against everything

While the cyber security landscape has advanced by incredible leaps since antivirus software was introduced in the 1980s; worryingly, many SMBs still believe that basic antivirus is enough protection for their physical endpoints. But with so many unprotected devices, networks, and Cloud-based services currently active these days, this is not a business trend that can continue to exist in our increasingly hybrid world.

The main problem with antivirus software is that it’s only suited for recognising and blocking threats that are already known – and with so many new and sophisticated forms of malware being developed every day, the limitations of this go without saying.

This is especially true these days, where sneaking malicious links past antivirus programs is easily done by embedding them within PDF attachments – which saw particular prominence near the end of 2022, with attacks of this kind skyrocketing by 38%.
‍
Isolation technology – the vital component for hybrid security

Of course, this is not to say that antivirus software is completely obsolete – instead, it should be viewed only as a component of a multi-layered cyber security strategy, rather than one catch-all solution. But what does this next layer of cyber security look like?Unlike antivirus protection, isolation technology is actually able to protect against threats that it hasn’t encountered before. This is because the technology treats all applications – PDF, Microsoft Outlook, Google Chrome, etc. – with the same zero-trust protocol, opening them into virtual areas that are completely isolated from a machine’s OS. Therefore, even in the event of surprise malware, the isolation technology has already neutralised the threat and prevented it from spreading to other areas of the network.

With antivirus and endpoint security working as a foundation, isolation technology gives organisations the best chance of protecting their hybrid workforce – with protocols that even mitigate against human error to a certain extent.

Promoting a culture of vigilance  

As with any companywide change, nurturing a hybrid culture that values cyber security is instrumental to your updated practices persisting into the future. Start building a strong cyber security framework by updating your company policies and governance practices; and by expanding risk management processes to include incident response plans and regular penetration testing.

Another step is training and education – and to demonstrate the role that your employees play in keeping their workplace secure, you should find initiatives that favour powerful visual presentation. For many people, words on a page only go so far – whereas a demonstration from an ethical hacker could foster far-reaching behavioural change among your employees.

In the modern cyber security landscape, businesses can no longer afford to protect their hybrid workers with only the bare minimum. However, augmenting your existing security with isolation technology – as well as cultivating a proactive culture – will allow you to keep your employees working smarter and safer for whatever challenges the future may hold.

About Apogee Corporation

Apogee Corporation is Europe's largest multi-brand provider of managed workplace services.

An independent subsidiary of HP Inc., Apogee combines its thirty years of experience with the advantage of being part of one of the world’s leading technology companies. This union with HP Inc. offers instant access to the latest innovation, all supported by our market-leading service operations. Combining innovative technology and workplace services with their market-leading client support, Apogee’s clients can take control of their digital journey, driving business and employee efficiencies.

For more information, visit apogeecorp.com or connect via LinkedIn, Twitter, Instagram or Facebook.