As the world’s attention is consumed by the impacts of COVID-19, cybercriminals have seized the opportunity. TechRepublic paints a vivid picture of the COVID-19 pandemic  as “a breeding ground for phishing scams , skimming attacks and a host of other cybersecurity nasties” grimly seeking to exploit the situation.
As IT and HR teams adapt to the new normal of remote working and dispersed teams, cyber-security must be a top priority. From March through to May, IBM X-Force observed a greater than 6,000 percent increase in coronavirus-themed spam . Cybercriminals are using the coronavirus outbreak to drive their business, with virus-themed sales of malware assets on the dark web and even virus-related discount codes, malicious domains and ransomware.
This is clearly a concern at a time when remote workforces are relying on digital, mobile platforms to interact. In this year’s annual Ponemon Institute and IBM Security Cost of a Data Breach Report, 2020, a full 80% of breached organizations stated that customer personally identifiable information (PII) was compromised far more than any other type of record . While the average cost per lost or stolen record was $146 across all data breaches, those containing customer PII cost businesses $150 per compromised record. In total, this amounted to an average cost of $5.52million (€4.68m) at enterprises of more than 25,000 employees, and a crippling $2.64 million (€2.24m) for small organizations under 500 employees.
Increased risk working from home
How do these attacks occur? With employees accessing corporate networks via personal devices, hackers can probe Wi-Fi configurations and VPN connections for vulnerabilities. As people congregate on cloud-based productivity platforms, malicious actors can hack in, even disrupting live meetings. In a recent online poll by Threatpost, 40% of respondents reported increased cyberattacks as they enable remote working .
You’d think, then, that most organizations are mobilising their IT systems to fight back. However, our research has found that the vast majority of organizations we surveyed (74%) are still reporting that their plans are either ad-hoc, applied inconsistently, or that they have no plans at all. Even those that are on the ball are being stretched to the limit .
So, to help get up-to-speed, here’s a checklist from IBM of what you should already put in place:
With such protocols in place, displaced workers can use the secure equipment and maximize digital safety. The European insurer Zurich has, since the pandemic lockdown, established a dedicated hub as a business resource to manage day-to-day operations when navigating the growing risk associated with COVID-19, monitor threats across entities and launch local and group-level responses .
Deeper visibility into suspicious activity is needed
As organizations have shifted to incorporate remote work and more disconnected, hybrid multicloud environments, a zero-trust strategy can help protect data and resources by making them accessible only on a limited basis and in the right context .
Security tools with the ability to share data between disparate systems can help security teams detect incidents across complex hybrid multicloud environments . We find that Unified endpoint management (UEM)  and identity and access management (IAM) products and services  can help provide security teams with deeper visibility into suspicious activity on company and bring your own (BYO) laptops.
In times of crisis, effective threat remediation comes down to the ability of individuals to work together on complex problems. Cyber-resilient organizations therefore operate in a continuous cycle of discover, learn, adapt and iterate. As more workloads and users move to cloud operations, accelerated by the current work-from-home requirements, cybersecurity resilience will evolve from a baseline requirement into a driver of a competitive advantage.
To help IT Security Leaders prepare for the future trends and to better understand where new threats are likely to come from, IBM together with CorporateLeaders are hosting a live and interactive chat with futurist Richard Van Hooijdonk and cybersecurity expert Maxwell Keyte, Security Leader BeNeLux, IBM. Register here, join us, and get prepared.
Watch the debate
IBM and CorporateLeaders are hosting the Cybersecurity in an Unpredictable World live-streamed discussion on 30th September at 16:00. Discover the cybersecurity challenges businesses will need to protect against now and in the future with our panel. Led by Richard Van Hooijdonk, futurist and trendwatcher, and Maxwell Keyte, Security Leader Benelux, IBM, moderated by Virginie Claes, former Miss Belgium and TV presenter, we will discuss how to protect your people, IPs and data in the company of the future.
 Microsoft says the pandemic has changed the future of cybersecurity in these five ways, Tech Republic
 Phishing: Why remote working is making it harder for you to spot phoney emails, ZD Net
 The COVID-19 cyberwar: How to protect your business, IBM
 Security Cost of a Data Breach Report, 2020, IBM
 Coronavirus Poll Results: Cyberattacks Ramp Up, WFH Prep Uneven, Threat Post
 IBM Study: Security Response Planning on the Rise, But Containing Attacks Remains an Issue, IBM
 Coronavirus (COVID-19) Resource Hub: Transitioning back to the workplace, Zurich
 A zero trust strategy needs context-based security, IBM
 IBM Cloud Pak for Security, IBM
 AI meets unified endpoint management (UEM), IBM
 Identity and access management (IAM) solutions, IBM