E14: What Your End Users Do at Home!

Off the Wire: A Play by Play on Cybersecurity and Technology Issues

## Off the Wire Podcast Show Notes

### Episode Summary
Welcome to the Off the Wire podcast, your go-to source for insights into the fast-paced world of cybersecurity and technology. This episode features a new co-host, Tanner Greer, who joins Anthony Kent to discuss a critical topic: what happens when users work from home.

### Key Topics Covered
1. **Introduction of New Co-host Tanner Greer**
- Anthony Kent introduces Tanner Greer, highlighting his extensive experience in the co-op world and his contributions to the field of IT and cybersecurity.
- Tanner shares his background and journey from entry-level IT roles to his current position as CTO.

2. **Impact of COVID-19 on Remote Work**
- Discussion on how COVID-19 has forced organizations to support remote work, highlighting both challenges and opportunities.
- The shift to remote work and its implications on cybersecurity, including the need for new security measures.

3. **Challenges of Securing Remote Work Environments**
- The increased complexity of securing networks as employees work from home or other remote locations.
- The vulnerabilities of home networks and the risks posed by mobile devices and personal usage on work devices.
- Real-life examples of phishing attacks and other security breaches.

4. **Best Practices for Remote Work Security**
- The importance of endpoint protection and hardening, including the use of EDR (Endpoint Detection and Response) tools like CrowdStrike.
- Strategies for patch management and remote support using tools like Endpoint Central and Secure Gateway Server.
- Implementing DNS protection and micro-segmentation to limit lateral movement and protect sensitive data.

5. **User Education and Awareness**
- The role of continuous user education in maintaining security, including live training sessions and the use of security awareness platforms.
- Encouraging good security habits like locking devices when not in use and avoiding the use of work email addresses for personal accounts.
- The importance of tools like Duo for multifactor authentication and additional security checks.

6. **The Future of Remote Work Security**
- Emphasizing the need for organizations to adopt a Zero Trust approach, treating all devices and networks as potentially insecure.
- The potential benefits of using VDI (Virtual Desktop Infrastructure) to maintain control over remote work environments.
- The ongoing need for adaptation and vigilance in cybersecurity practices as remote work continues to evolve.

### Key Takeaways
- Remote work introduces significant security challenges that require robust solutions and continuous education.
- Tools like EDR, DNS protection, and multifactor authentication are essential in securing remote environments.
- User education is crucial in fostering a culture of security awareness and proactive behavior.
- Adopting a Zero Trust approach and leveraging modern security tools can help mitigate risks associated with remote work.

### Resources Mentioned
- CrowdStrike for EDR and vulnerability scanning.
- Endpoint Central and Secure Gateway Server for patch management and remote support.
- Duo for multifactor authentication and device security checks.
- Cisco Umbrella for DNS protection.
- Have I Been Pwned for checking compromised email addresses.

### Closing Remarks
Anthony and Tanner emphasize the importance of staying vigilant and continuously improving security practices to protect against evolving threats in the cybersecurity landscape. They encourage listeners to implement the discussed strategies and remain proactive in their security efforts.

Tune in next time for more insights and expert analysis on the Off the Wire podcast!