The impact of Covid-19, the pandemic alters the way of evaluating risk in companies

Pandemic Impact on Cybersecurity: CISOs’ Perspectives and the Human Factor

A CSO survey (ComputerWorld/CSO) reveals that US CISOs have experienced 26% more cyberattacks since the COVID-19 crisis began — a reality that would have been unthinkable just six months ago. This surge raises pressing questions:

• How long will this elevated risk persist?
• Are companies truly prepared?
• How is security being affected?

Telework: From Niche to Norm

Before the pandemic, only 16.5% of respondents worked remotely; today, 77.7% do so. This unprecedented shift forced technology teams to:

• Deploy infrastructure
• Ensure secure connectivity and access
• Provide devices … all in record time.

Security Readiness and New Investments

• 67% of companies say their security infrastructure is ready for the risks of the new remote environment.
• 22% have purchased new security solutions to adapt.
• Surprisingly, only 7% of small businesses have updated or invested in new tools during this time.

Cyberattack Trends During COVID-19

The crisis created ideal conditions for cybercrime:

• Phishing with fake cures and miracle virus remedies.
• Malicious tracking apps disguised as COVID-19 tools to deploy malware and steal data.
• Unsecured remote desktop (RDP) access exploited by attackers.
• Banking sector hit hardest, with a 37% increase in threats.

Regulatory Guidance

The Spanish Data Protection Agency (AEPD) issued recommendations stressing that:

“The resilience of the State, business process continuity, and the rights and freedoms of individuals whose data is processed depend on reflecting and adapting the implementation of teleworking.”

Teleworking: More Than a Tech Project

Remote work is not just an ICT initiative — it’s a fundamental shift in daily operations. Under confinement, employees face stressors such as:

• Uncertainty
• Isolation
• Non-ideal work environments
• Disorganization and exhaustion

Given that people are the core element in the security environment, organizations must:

• Focus on the human factor
• Understand psychological impacts
• Provide support to reduce internal risks

📌 Contact Kymatio to start preventing human-origin cybersecurity risks in your organization.