Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Tenable Blog

Subscribe

Spotlight on Australia: Remote Work is Here to Stay and So are Cyberattacks

Snap lockdowns are making remote work models a permanent feature — and leaving organisations more exposed to risk. Find out how the floodgates for cyberattacks have opened in Australia. 

As many Australians grapple with long stints of remote work due to snap lockdowns, it's looking more certain than ever before that the way we work will never go back to how it was pre-pandemic. In fact, 77% of Australian businesses plan to have employees working from home at least once a week in the next 12-24 months while 59% plan to make remote work permanent in the next 1-2 years.

The self-reported data is drawn from a commissioned study of more than 1,300 security leaders, business executives and remote employees worldwide, including 161 respondents in Australia. The study, Beyond Boundaries: The Future of Cybersecurity in the New World of Work, was conducted in April 2021 by Forrester Consulting on behalf of Tenable. 

Adoption of new technologies continues to atomise the attack surface

The pandemic response accelerated the pace of technological adoption, with IT and security teams turning to cloud-based solutions, expanding their software supply chain and quickly rolling out tools for connectivity, collaboration and productivity.

But this rapid adoption of new technologies won't be slowing down anytime soon as organisations shift out of pandemic crisis mode and adjust to a new world of work — one that's a combination of in-office and work-from-home models.

To facilitate this new work order, over the next 12-24 months Australian business and security leaders plan to continue their focus on enhancing existing digital platforms (65%), moving non-critical-business functions to the cloud (55%) and creating new digital platforms (57%). And while these changes are enabling organisations to pivot their business operations and improve the experience for employees, they're also setting the stage for increased risk.

Remote workers increase business risk

When we talk about a home office, it's easy to focus on the physical elements of what it entails — a desk, chair, printer, laptop and maybe a couple of monitors. What's unseen is the myriad of people and devices connecting to the very same home network.

Taking a glimpse into the average home in Australia, it was found that roughly nine in 10 remote workers connected six or more devices to their home networks. But that's not the worst part. The study revealed that many remote workers access corporate financial records (43%) and customer data (51%) from a personal device — oftentimes with little guidance to ensure data remains protected. 

Australian security leaders now have less control over risk, as they face a lack of compliance by homeworkers and limited visibility over the expanding home network of the remote workforce. Two in five security leaders say they lack visibility into remote employee home networks and their connected devices. Furthermore, 45% of business and security leaders say they are somewhat or largely unprepared to support their workforce strategy from a security standpoint over the next 12-24 months. 

Cyberattacks will continue to persist

These concerns are justified when you look at the threat landscape of the past 12 months. A staggering 92% of Australian organisations experienced at least one business-impacting* cyberattack with 70% falling victim to three or more.

Nearly three quarters of respondents (73%) said these attacks targeted remote workers, making them one of the biggest risks facing Australian organisations in the new world of work. The vast majority of organizations (70%) suffered an attack that resulted from vulnerabilities in systems put in place in response to the pandemic, whilst 59% attributed recent attacks to a third-party software vendor compromise. These cyberattacks underscore the need for greater visibility into the atomised attack surface. 

It's no wonder eight out of 10 business and security leaders say that their organisations are more exposed to risk as a result of a remote workforce.

Redefining what risk is

As organisations in Australia continue to embrace a hybrid work model, they must redefine and address what risk means for the new world of work. It's no longer about securing a disparate piece of software or code. It's about having visibility of their infrastructure, identifying those assets and systems that are critical to function, and scanning for flaws in the most dynamic aspects of their attack surface. In tandem, the focus must be placed on restricting access to critical systems and key internal data by addressing misconfigurations in the Active Directory to disrupt attack paths. 

Focus on vulnerabilities that matter most to the business. This allows security teams to remediate and focus on vulnerabilities that are being actively exploited by threat actors rather than the thousands that might only theoretically be used. 

Manage risks across third-party service providers. That means having a better understanding and vetting of vendors in the supply chain and consistently evaluating third-party and contractor access to enterprise data, and continuously scanning for unmanaged assets connecting to the corporate network. Closing the holes attackers look to climb through can prevent attacks from being successful.

Don't wait until today's risk becomes tomorrow's reality. Align your organisation's cybersecurity strategies today to keep pace with business changes.

*A business-impacting cyberattack is one which results in one or more of the following outcomes: loss of customer, employee, or other confidential data; interruption of day-to-day operations; ransomware payout; financial loss or theft; and/or theft of intellectual property.

View more study highlights here

Related Articles

Cybersecurity News You Can Use

Enter your email and never miss timely alerts and security guidance from the experts at Tenable.

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.

Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

100 assets

Choose Your Subscription Option:

Buy Now

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.

Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

100 assets

Choose Your Subscription Option:

Buy Now

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.

Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

100 assets

Choose Your Subscription Option:

Buy Now

Try Tenable Web App Scanning

Enjoy full access to our latest web application scanning offering designed for modern applications as part of the Tenable One Exposure Management platform. Safely scan your entire online portfolio for vulnerabilities with a high degree of accuracy without heavy manual effort or disruption to critical web applications. Sign up now.

Your Tenable Web App Scanning trial also includes Tenable Vulnerability Management and Tenable Lumin.

Buy Tenable Web App Scanning

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

5 FQDNs

$3,578

Buy Now

Try Tenable Lumin

Visualize and explore your exposure management, track risk reduction over time and benchmark against your peers with Tenable Lumin.

Your Tenable Lumin trial also includes Tenable Vulnerability Management and Tenable Web App Scanning.

Buy Tenable Lumin

Contact a Sales Representative to see how Tenable Lumin can help you gain insight across your entire organization and manage cyber risk.

Try Tenable Nessus Professional Free

FREE FOR 7 DAYS

Tenable Nessus is the most comprehensive vulnerability scanner on the market today.

NEW - Tenable Nessus Expert
Now Available

Nessus Expert adds even more features, including external attack surface scanning, and the ability to add domains and scan cloud infrastructure. Click here to Try Nessus Expert.

Fill out the form below to continue with a Nessus Pro Trial.

Buy Tenable Nessus Professional

Tenable Nessus is the most comprehensive vulnerability scanner on the market today. Tenable Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.

Buy a multi-year license and save. Add Advanced Support for access to phone, community and chat support 24 hours a day, 365 days a year.

Select Your License

Buy a multi-year license and save.

Add Support and Training

Try Tenable Nessus Expert Free

FREE FOR 7 DAYS

Built for the modern attack surface, Nessus Expert enables you to see more and protect your organization from vulnerabilities from IT to the cloud.

Already have Tenable Nessus Professional?
Upgrade to Nessus Expert free for 7 days.

Buy Tenable Nessus Expert

Built for the modern attack surface, Nessus Expert enables you to see more and protect your organization from vulnerabilities from IT to the cloud.

Select Your License

Buy a multi-year license and save more.

Add Support and Training