Protecting Your Organization From Cyber Attacks While Implementing COVID-19 Remote Working Protocols - Technology - Canada - Mondaq News Alerts

Protecting Your Organization From Cyber Attacks While Implementing COVID-19 Remote Working Protocols - Technology - Canada - Mondaq News Alerts

To print this article, all you need is to be registered or login on Mondaq.com.


Due to the global pandemic brought to you by COVID-19, businesses and organizations are shifting their operations to home work environments. Meanwhile, opportunistic cyber criminals are capitalizing on the coronavirus to roll out a series of new scams to collect sensitive information and steal money.


Widely reported examples include cyber criminals mimicking reputable organizations such as the World Health Organization or public health authorities to trick users to give up their email and password credentials, or to download malicious software enabling the attacker to gain access to the organization's computer systems. Cyber criminals are also mimicking tax authorities and inviting individuals to click on a link to download fake refunds in the wake of recent economic relief efforts.


No business or organization wants to be featured in the front page news as the most recent cyber victim, or have to notify its clients or customers of a security breach. We briefly highlight what your organization should be doing to safeguard your system and the personal information during your work from home protocol, your organization's statutory responsibilities in this regard, and provide an example of how inadequate security safeguards increase the risk of cyber-attacks and adverse decisions.


Statutory Obligations to Safeguard Personal Information


Businesses and organizations have a statutory obligation to ensure that their information is safeguarded at all times, including while accommodating remote working arrangements.


Private companies in British Columbia must at all times comply with the Personal Information and Protection of Privacy Act, SBC 2003, c.63 ("PIPA"). PIPA requires organizations to use reasonable physical, administrative and technical safeguards to protect personal information from unauthorized access, collection, use, disclosure, copying, modification or ..

Support the originator by clicking the read the rest link below.