--- title: “When the tide goes out….” Reviewing the risks of remote working description: Remote working was undoubtedly one of the biggest success stories of 2020. image: https://blog.fordway.com/hubfs/Remote%20Working%20Small%20File.jpg --- T. 01483 528 200 [How can we help?](https://www.fordway.com/contact-us) [Contact us](https://www.fordway.com/contact-us) [![fordway-logo](https://www.fordway.com/wp-content/uploads/2019/07/fordway-logo.png "fordway-logo")](https://www.fordway.com/) - [Home](https://www.fordway.com) - [Insights](https://www.fordway.com/insights/blog) - [Cloud Services](https://www.fordway.com/services/cloud) # Fordway Blog ## [“When the tide goes out….” Reviewing the risks of remote working](https://blog.fordway.com/reviewing-the-risks-of-remote-working) \[fa icon="calendar"\] Jan 13, 2021 10:00:00 AM / by [Richard Blanford](https://blog.fordway.com/author/richard-blanford) - [Tweet](https://twitter.com/share) ![pexels-ken-tomita-389818-jpg](https://blog.fordway.com/hs-fs/hubfs/pexels-ken-tomita-389818-jpg.jpeg?width=5280&name=pexels-ken-tomita-389818-jpg.jpeg) Remote working was undoubtedly one of the biggest success stories of 2020. Organisations adapted incredibly quickly, thanks to IT teams working extremely hard to make things happen, and no doubt many people will continue working this way in the longer term. However, by being forced to make the changes so quickly organisations may have opened themselves up to new information security risks. Some of these are relatively easy to spot: most of us will have seen the phishing emails, and an unlucky few may have had personal Zoom calls hacked. Other risks may not become clear until much later. As Warren Buffett points out: “Only when the tide goes out do you discover who's been swimming naked.” While he was referring to financial companies over-extending themselves, the principle is just as relevant in this context. And it may be a useful analogy when explaining things to less technical colleagues! With remote working being the norm for most of us, we need to consider whether systems and processes rolled out in haste have the appropriate safeguards in place for long-term production use. Organisations need policies and processes that will provide assurance that data is secure, maintain customer trust and protect the organisation’s reputation. These need to be integrated across all channels to ensure nothing slips through the gaps. The key point to remember is that while we’re talking about information security risk, this isn’t just an IT risk but a business risk. So IT leaders have to explain to their senior management why it matters, and get their buy-in for the work (and budget!) needed to develop an appropriate risk management strategy and embed it in policy and practice. Getting this right is a fine balance between mitigation and agility. Being too risk-averse can be extremely costly, but too few controls can put an organisation’s reputation, and potentially its very future, in jeopardy. When large organisations suffer an information security breach, it makes the headlines, but the majority have the scale to recover. When it comes to reputational damage SMBs often fare worse than larger organisations. A recent [article](https://www.itpro.co.uk/security/data-breaches/357941/how-much-will-a-data-breach-really-damage-your-organisations) highlights a 60% failure rate among the SMB market within 6-12 months after a company discloses a breach, which is attributed partly to confidence issues and partly to recovery challenges. To help organisations tackle information security risks, we’ve developed a White Paper. This covers the principles of assessing information security risk and putting appropriate governance and compliance in place, as well as offering some practical tips. My colleagues will be blogging more about this in the next couple of weeks, or you can download the paper directly [here](https://blog.fordway.com/hubfs/White%20Papers/Risk%20Management%20White%20Paper.pdf). If you're looking for another great read, here's one on [Helping your staff to work securely while remote.](https://blog.fordway.com/helping-your-staff-to-work-securely-while-remote) Topics: [Technology](https://blog.fordway.com/topic/technology), [information security](https://blog.fordway.com/topic/information-security), [Cyber Security](https://blog.fordway.com/topic/cyber-security) ![Richard Blanford](https://blog.fordway.com/hs-fs/hubfs/Blog%20images/bloggers/RB_Headshot.png?width=100&height=100&name=RB_Headshot.png) #### Written by [Richard Blanford](https://blog.fordway.com/author/richard-blanford) [\[fa icon="linkedin-square"\]Linkedin](https://www.linkedin.com/in/richard-blanford-508563/) [\[fa icon="twitter-square"\]Twitter](https://www.twitter.com/fordwaybloke) ### Get updates directly to your inbox   Read more about [Fordway Cloud Services](https://www.fordway.com/cloud-services) - Recent - Popular - Categories ### Lists by Topic - [Cloud (16)](https://blog.fordway.com/topic/cloud) - [IT Strategy (13)](https://blog.fordway.com/topic/it-strategy) - [Security (13)](https://blog.fordway.com/topic/security) - [IT Transformation (10)](https://blog.fordway.com/topic/it-transformation) - [Technology (10)](https://blog.fordway.com/topic/technology) - [cloud intermediation (10)](https://blog.fordway.com/topic/cloud-intermediation) - [Cloud migration (9)](https://blog.fordway.com/topic/cloud-migration) - [Cloud Security (8)](https://blog.fordway.com/topic/cloud-security) - [enterprise cloud (8)](https://blog.fordway.com/topic/enterprise-cloud) - [Insider (7)](https://blog.fordway.com/topic/insider) - [Strategy (7)](https://blog.fordway.com/topic/strategy) - [Cloud Shock (6)](https://blog.fordway.com/topic/cloud-shock) - [Fordway Managed Services (6)](https://blog.fordway.com/topic/fordway-managed-services) - [GDPR (6)](https://blog.fordway.com/topic/gdpr) - [managed cloud (6)](https://blog.fordway.com/topic/managed-cloud) - [Azure (5)](https://blog.fordway.com/topic/azure) - [Disaster Recovery (5)](https://blog.fordway.com/topic/disaster-recovery) - [New Technology (5)](https://blog.fordway.com/topic/new-technology) - [legacy (4)](https://blog.fordway.com/topic/legacy) - [tactical (4)](https://blog.fordway.com/topic/tactical) - [#ChooseToChallenge (3)](https://blog.fordway.com/topic/choosetochallenge) - [#IWD2021 (3)](https://blog.fordway.com/topic/iwd2021) - [Cloud Monitoring (3)](https://blog.fordway.com/topic/cloud-monitoring) - [Data Protection (3)](https://blog.fordway.com/topic/data-protection) - [Fordway (3)](https://blog.fordway.com/topic/fordway) - [Governance (3)](https://blog.fordway.com/topic/governance) - [ITIL (3)](https://blog.fordway.com/topic/itil) - [Risk Management (3)](https://blog.fordway.com/topic/risk-management) - [cloud first (3)](https://blog.fordway.com/topic/cloud-first) - [remote working (3)](https://blog.fordway.com/topic/remote-working) - [trends (3)](https://blog.fordway.com/topic/trends) - [Cyber Security (2)](https://blog.fordway.com/topic/cyber-security) - [Meet the team (2)](https://blog.fordway.com/topic/meet-the-team) - [Ransomeware, incident response, CISO, Security (2)](https://blog.fordway.com/topic/ransomeware-incident-response-ciso-security) - [Ransomware (2)](https://blog.fordway.com/topic/ransomware) - [case study (2)](https://blog.fordway.com/topic/case-study) - [compliance (2)](https://blog.fordway.com/topic/compliance) - [technical debt (2)](https://blog.fordway.com/topic/technical-debt) - [Cloud Paging (1)](https://blog.fordway.com/topic/cloud-paging) - [Connectivity (1)](https://blog.fordway.com/topic/connectivity) - [DaaS (1)](https://blog.fordway.com/topic/daas) - [DraaS (1)](https://blog.fordway.com/topic/draas) - [Incident Response (1)](https://blog.fordway.com/topic/incident-response) - [Managed Services (1)](https://blog.fordway.com/topic/managed-services) - [Microsoft Sentinel (1)](https://blog.fordway.com/topic/microsoft-sentinel) - [Networking (1)](https://blog.fordway.com/topic/networking) - [Optimised Infrastructure (1)](https://blog.fordway.com/topic/optimised-infrastructure) - [Patch Management (1)](https://blog.fordway.com/topic/patch-management) - [Patching (1)](https://blog.fordway.com/topic/patching) - [Project Management (1)](https://blog.fordway.com/topic/project-management) - [Technology Services 2 (1)](https://blog.fordway.com/topic/technology-services-2) - [Web hosting (1)](https://blog.fordway.com/topic/web-hosting) - [hyperconvergence (1)](https://blog.fordway.com/topic/hyperconvergence) - [information security (1)](https://blog.fordway.com/topic/information-security) - [shared services (1)](https://blog.fordway.com/topic/shared-services) - [vdi (1)](https://blog.fordway.com/topic/vdi) - [virtual desktop (1)](https://blog.fordway.com/topic/virtual-desktop) see all ## [Older Fordway Posts](https://www.fordway.com/blog/archive)   [Tweets by @Fordway](https://twitter.com/Fordway) ### CONTACT 01483 528 200 [Privacy Policy](https://www.fordway.com/privacy-policy) [Anti-Slavery Policy](https://www.fordway.com/anti-slavery-policy)   ### This is Ermincloud the Fordway cow [Find out why she matters to us!](https://www.fordway.com/ermincloud) [![](https://fw-dev-neu-webasp-001.azurewebsites.net/wp-content/uploads/2019/07/twitter-footer-icon.png)](https://twitter.com/Fordway) [![](https://fw-dev-neu-webasp-001.azurewebsites.net/wp-content/uploads/2019/07/facebook-footer-icon.png)](https://www.facebook.com/Fordway-358130410947628/) [![](https://fw-dev-neu-webasp-001.azurewebsites.net/wp-content/uploads/2019/07/youtube-footer-icon.png)](https://youtube.com) [![](https://fw-dev-neu-webasp-001.azurewebsites.net/wp-content/uploads/2019/07/linkedin-footer-icon.png)](https://www.linkedin.com/company/fordway-solutions) Copyright © 2020 Fordway Solutions \[fa icon="chevron-up"\]Back to top ![](https://dc.ads.linkedin.com/collect/?pid=94312&fmt=gif)