Spotlight on Mexico: The New World of Work Requires a New Cybersecurity Mindset
Embracing the new world of hybrid and remote work in Mexico has opened the door to new and unmanaged cyber risk. Voici ce qu'il faut savoir.
The pandemic completely transformed the way most organizations work, and Mexico is no exception. At the beginning of 2020, hybrid and remote work models were far-off visions of the future at a time when only 16% of Mexican organizations had employees working remotely. By April 2021, eight out of 10 Mexican organizations had adopted remote work, with 71% planning to make it permanent in the next one to two years. Yet, 80% of security and business leaders have raised concerns that this new world of work creates increased risk.
The self-reported data is drawn from a commissioned study of more than 1,300 security leaders, business executives and remote employees worldwide, including 155 respondents in Mexico. L'étude Au-delà des frontières : l'avenir de la cyber-sécurité dans le nouveau monde du travail a été menée par Forrester Consulting à la demande de Tenable en avril 2021.
Embracing new world of work brings new and unmanaged cyber risk
The rapid transition to facilitate remote work accelerated technology adoption. As a result, the attack surface has transformed with the adoption of new cloud-based solutions, alongside significant changes in the digital platforms and the software supply chain in order to improve collaboration, communication and productivity.
The vast majority (82%) of remote workers in Mexico have six or more devices connected to their home networks, and many admit to using a personal device to access customer data (59%) and financial records (40%). Six out of 10 security leaders said they lack visibility over remote employee home security practices.
Cloud-based solutions played a key role in enabling businesses continuity. Today, Mexican organizations have moved business-critical functions (77%) and non-business critical functions (90%) into the cloud.
Digital platforms and services are next. Almost half (47%) of Mexican organizations enhanced existing digital platforms, while 23% created new platforms in pandemic times. Looking to the future, 67% of security and business leaders said enhancing digital platforms will continue to be a priority.
The software supply chain also expanded as a result of the pandemic, according to 63% of respondents; another 14% expect to add new software over the next 12-24 months.
Attackers have also evolved
Attackers have capitalized on these workforce changes. Ninety-six percent of Mexican organizations experienced a business-impacting* cyberattack in the last 12 months, with 81% falling victim to four or more
When looking at the focus of these attacks:
- 74 % étaient le résultat de vulnérabilités résidant sur des systèmes et/ou dans des applications mis en place en réponse à la pandémie
- 69 % ont ciblé des employés travaillant à distance ou depuis leur domicile
- 59% resulted from a third-party software vendor compromise
- 57% involved an unmanaged personal device used in a remote work environment
The time to rethink risk management is now
There is no turning back. A new world of work that combines in-office and remote work is here to stay. As a result, security and business leaders are turning their eyes forward and planning to increase investments in network security (88%), vulnerability management (79%) and cloud security (75%) in the next one to two years. Seventy-three percent feel confident that in the next two years they will have the ability to accurately analyze and measure cyber risk, allowing for better business and technology decisions.
Managing risk in an environment where the perimeter has disappeared even as the attack surface continues to expand isn't an easy task. Organizations cannot rely on yesterday's tools to secure this new reality. Securing the new world of work requires a new mindset. It's imperative that organizations gain a holistic view of their risk profile and re-evaluate their cybersecurity strategies to ensure businesses aren't left vulnerable.
If cybersecurity strategy fails to keep pace with business changes, today's risk could become tomorrow's reality.
* Une cyber-attaque ayant des répercussions sur l'activité a au moins l'une des conséquences suivantes : perte de données client, de données employé ou d'autres données confidentielles ; interruption des opérations quotidiennes ; versement d'une rançon ; perte financière ou détournement de fonds et/ou vol de propriété intellectuelle.
Articles connexes
Cybersecurity Snapshot: CISA Shines Light on Cloud Security and on Hybrid IAM Systems’ Integration
March 15, 2024Check out CISA’s latest best practices for protecting cloud environments, and for securely integrating on-prem and cloud IAM systems. Plus, catch up on the ongoing Midnight Blizzard attack against Microsoft. And don’t miss the latest CIS Benchmarks. And much more!
Poor Identity Hygiene at Root of Nation-State Attack Against Microsoft
February 1, 2024The latest breach suffered by Microsoft shows once again that detection and response are not enough. Because the source of an attack almost always boils down to a single overlooked user and permission, it’s critical for organizations to have strong preventive security.
Cybersecurity Snapshot: What’s in Store for 2024 in Cyberland? Check Out Tenable Experts’ Predictions for OT Security, AI, Cloud Security, IAM and more
December 29, 2023The new year is upon us, and so we ponder the question: What cybersecurity trends will shape 2024? To find out, we asked Tenable experts to read the tea leaves. Their 2024 forecasts include: A bigger security role for cloud architects; a focus by ransomware gangs on OT systems in critical industries; an intensification of IAM attacks; and much more!
Cybersecurity Snapshot: North Korea’s Cyber Spies Hunt for Nuclear Secrets, as Online Criminals Ramp Up AI Use in the EU
July 26, 2024Check out a CISA-FBI advisory about North Korean cyber espionage on critical infrastructure orgs. Plus, what Europol found about the use of AI for cybercrime. Meanwhile, the risk concerns that healthcare leaders have about generative AI. And a poll on water plant cybersecurity. And much more!
ConfusedFunction: A Privilege Escalation Vulnerability Impacting GCP Cloud Functions
July 24, 2024Organizations that have used Google Cloud Platform’s Cloud Functions – a serverless execution environment – could be impacted by a privilege escalation vulnerability discovered by Tenable and dubbed as “ConfusedFunction.” Read on to learn all about the vulnerability and what your organization needs to do to protect itself.
Tenable’s Software Update Process Protects Customers’ Business Continuity with a Safe, Do-No-Harm Design
July 23, 2024With the unprecedented tech outages experienced by so many of our customers over the last week, we recognize the need for deeper understanding of our software development processes and how they support global business continuity. In this blog post, we’ll outline how Tenable’s comprehensive approach to the software development lifecycle (SDLC) allows us to produce extremely high-quality software and protect our customers’ business operations with a secure, do-no-harm approach.
- Active Directory
- Cloud
- Executive Management
- Endpoint security
- Internet of Things
- BYOD
- Remote Workforce
- Reports
- Research Reports
- Risk-based Vulnerability Management
- Center for Internet Security (CIS)
- Threat Intelligence
- Threat Management
- Vulnerability Management
- Vulnerability Scanning