We are all currently experiencing disruptive shifts in priorities and competing needs due to COVID-19. When we are preoccupied with taking precautions to protect the health of our friends and families, it’s easy for bad actors to take advantage of our distraction.
We want everyone to be aware that the COVID-19 challenge is a potentially perfect storm for people looking to prey on easy targets online. Subsequently, all our service lines are open and, where possible, we are conducting work from remote locations. These shutdowns will have no impact on scoping, intaking or working Incident Response cases, including our Endpoint SOC Operations. Even our on-site Post Breach Remediation team is still working remotely when possible, and taking extra precautions when they need to be on-site.
Please consider these tips to help keep safe online.
1. Just like you, bad people are spending more time at home on their computers too. Online threats are higher than normal.
2. Do not disable security mechanisms like VPNs or remote access protections provided to you by your employer.
3. Do not access random websites pretending to share information about COVID-19. The safest place to get information is from the CDC and similar national bodies. For information on this pandemic, trust your government and national healthcare services.
4. Keep in mind that people will try to use your emotions against you by using emails to trick you into sending money, giving up your password, or otherwise leveraging the COVID-19 pandemic to get you to do something you wouldn’t ordinarily do.
Similarly, if staff are staying at home and nobody is going to be using the computers and servers at work:
1. Have a contingency plan in place to ensure continued on-site and virtual security.
2. Identify who will respond to IT-related emergencies and allocate clear responsibilities.
3. Make sure systems continue to get patched and remain accessible, securely, to those that need to access them remotely.
4. Know that attackers are aware that nobody is at the office, so ensure your network is adequately monitored.
Kivu can be your resource for monitoring your network, remotely responding to an incident, or helping you develop a plan to remain protected from cyber threats.
Thank you for your continued partnership. Together, we will get through these difficult times.
The Kivu Team