Verizon, which provides network security services for companies, publishes a mobile security index (MSI) report that summarizes the status of mobile security every year.The 2020 edition, released in January, reported that companies have not taken sufficient measures and operations on mobile security.
Companies have been aware of the sweetness of mobile security since Corona
According to Mark Mark, Solutions Executive, in charge of Belizon Japan Security.
"In the survey, 54 % of companies say that mobile security is not confident than other systems, despite 83 % of companies recognizing the importance of mobility in business performance.It was shown that it was difficult to operate security and the company's response was delayed. "
Baizon Japan Security Solutions Executive Mori Mark
In addition, 86 % of companies have taken security measures and recognize that unauthorized access can be detected in -house, but 39 % of companies that were actually accidents have noticed that they first realized in external reports.He pointed out that there is a problem with corporate efforts, saying, "I'm worried that I'm underestimating the risks."
Even if the invasion is mobile, once you enter the company, it is likely that it will cause serious damage."66 % of companies that have caused information leakage and infringement have said they are large -scale damage, and subsequent continuous impacts and costs for countermeasures have been reported. Mobile security for companies.Is a risk that must be considered equally as normal security measures "(Mark)
Concerns about the security of rapid remote work
The MSI2020 survey was conducted in 2019, and it was revealed that there was already an issue for corporate mobile security.
There, the spread of the new colon virus in 2020 has been pursuing.Remote work (working from home) explodes to prevent infection, and the surge in remote access from outside companies has created a new security threat.
Yu Sekihara, a Mitsui & Direction Direction, who is a partner company in Belizon Japan and co -operates the Belizon Security Pelation Center (SOC) in Japan, is concerned that corporate security risks are rapidly increasing.
"As the importance of remote work has increased, the number of attacks on VPN outlettlets is increasing. In addition, it is urgently needed to increase the capacity of remote access, but add it to the on -premises VPN and the cloud systems.When bypassing, the risks are increasing because the security measures that have been passed have been omitted. "
Mitsui Bussan Secure Direction Consulting Service Business Director Yu Sekihara
There are other risks of security at home.In some cases, an attacker invades the home network of an employee's house and steals information from PCs and mobile devices used in home from home."Especially, the password of the Wi-Fi router used for the network at home has not been changed since the purchase, or the PC security may be weak. For attackers, the choice of intrusion routes will increase.Companies need to take measures "(Mr. Sekihara)
Be careful of fraud aiming at mobile terminals
When working from home, not only PCs but also mobile devices such as smartphones are often used.Sekihara points out that there is a risk different from PCs regarding mobile terminal security.
"Even those who can judge whether to click on a PC, may not know where the link on the smartphone screen, and may inadvertently touch it. It is a target that is easy to deceive and cost -effective for attackers."
In particular, the number of phishing acts from mobile devices to fake websites is increasing.Business email fraud (BEC) also has many cases that target mobile terminals.
"Many people know that there is a check function such as suspicious URLs and certificates on PC sites. However, in the case of mobile sites, even if the URL is displayed, it may not be visible on the screen.It is very difficult to determine the authenticity from the information displayed on the small screen. It is necessary to pay attention to the PC more than the PC, and companies need to provide security training to employees for mobile treatment "(Sekihara).
On the other hand, the problem of corporate security measures is that mobile websites may have weak security.Mobile applications have relatively strong security measures, but websites are targeted if there is not enough measures.
Both Mark and Sekihara mentioned that fraud was rapidly increasing in the benefits that make up for the decrease in the income of individuals and businesses by Corona."The number of frauds aimed at applying for benefits is increasing rapidly, especially in Germany, which is provided with a particularly simple application. The complexity of the application has become a problem in Japan.However, there is a possibility that it will poke it. Please be careful. "
Remote work and mobile are becoming a business base, but cyber attackers are always aiming for corporate weaknesses and gaps.If you do not say that you have been thin before Corona, you may be seriously damaged if you do not take advantage of mobile security.Companies should also take security measures and operations with the increase in remote environments.