Ten Things to Include in Remote Work IT Risk Assessments
summary
Lists ten concrete remote-work risks and fixes: unauthorized data exfiltration (asks whether sensitive files are encrypted at rest, in transit, and verifiable), exploitation by cyberattack with IBM figures (76% increase in time-to-detect, 70% higher breach cost), backup gaps for remote endpoints, social-engineering trends and recommended training sources (CISA, CIS Controls, NCUA, awareness platforms), unauthorized apps and third‑party due diligence, and three patch methods (on‑network, automatic, physical inspection). Includes audit findings (20% audit home networks, 11% do nothing) and action steps to build a risk-based remediation plan.
AI-written summary · about
chapters (19)
- 0:00Intro
- 1:57What is an IT Risk Assessment?
- 3:17Why Conduct a Remote Work IT Risk Assessment?
- 5:13Unauthorized Data Transmission
- 7:29Data Encryption
- 13:13IBM Security: Cost of a Data Breach Report 2020
- 14:33Data Backup
- 18:24Security Awareness Training
- 22:34Unauthorized Use of Information Assets
- 24:15Limit Local Administrator Access
- 27:05N2: Unauthorized Applications
- 29:15Patch Management
- 31:3610 Things to include in Remote Work IT Risk Assessments
- 32:25Determine Remote Workforce
- 33:15Identify Key Risks
- 33:51Assess Control Environment
- 34:32Communicate with Management
- 35:34Action Step Summary
- 37:08Thank You for Joining!
related talks
52mStrong Story to Tell: Top 10 Mistakes by Administrators About Remote Work
30mSecurity Awareness with a Remote Team
31mGetting the Security and Flexibility Balance Right in a COVID-19 World
46mSecurity Challenges of Cloud Native Companies with Remote Workers
52mManaging Organizational Risk during a World Pandemic
25mConsiderations in CSIRT Activities in the Risk of Infection with New Real Viruses
45mOpening Remarks, Rumblings, Ruminations, and Rants
39mLocknote: Conclusions and Key Takeaways from Day 2