Schließen
Schließen
Ihr Netzwerk von morgen
Ihr Netzwerk von morgen
Planen Sie Ihren Weg zu einem schnelleren, sichereren und widerstandsfähigeren Netzwerk, das auf die von Ihnen unterstützten Anwendungen und Benutzer zugeschnitten ist.
          Erleben Sie Netskope
          Get Hands-on With the Netskope Platform
          Here's your chance to experience the Netskope One single-cloud platform first-hand. Sign up for self-paced, hands-on labs, join us for monthly live product demos, take a free test drive of Netskope Private Access, or join us for a live, instructor-led workshops.
            Ein führendes Unternehmen im Bereich SSE. Jetzt ein führender Anbieter von SASE.
            Ein führendes Unternehmen im Bereich SSE. Jetzt ein führender Anbieter von SASE.
            Netskope debütiert als Leader im Gartner ® Magic Quadrant ™ für Single-Vendor SASE
              Generative KI für Dummies sichern
              Generative KI für Dummies sichern
              Learn how your organization can balance the innovative potential of generative AI with robust data security practices.
                Modern data loss prevention (DLP) for Dummies eBook
                Moderne Data Loss Prevention (DLP) für Dummies
                Get tips and tricks for transitioning to a cloud-delivered DLP.
                  Modernes SD-WAN für SASE Dummies-Buch
                  Modern SD-WAN for SASE Dummies
                  Hören Sie auf, mit Ihrer Netzwerkarchitektur Schritt zu halten
                    Verstehen, wo die Risiken liegen
                    Advanced Analytics transforms the way security operations teams apply data-driven insights to implement better policies. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.
                        Die 6 überzeugendsten Anwendungsfälle für den vollständigen Ersatz älterer VPNs
                        Die 6 überzeugendsten Anwendungsfälle für den vollständigen Ersatz älterer VPNs
                        Netskope One Private Access is the only solution that allows you to retire your VPN for good.
                          Colgate-Palmolive schützt sein "geistiges Eigentum" mit intelligentem und anpassungsfähigem Datenschutz
                          Colgate-Palmolive schützt sein "geistiges Eigentum" mit intelligentem und anpassungsfähigem Datenschutz
                            Netskope GovCloud
                            Netskope erhält die FedRAMP High Authorization
                            Wählen Sie Netskope GovCloud, um die Transformation Ihrer Agentur zu beschleunigen.
                              Let's Do Great Things Together
                              Die partnerorientierte Markteinführungsstrategie von Netskope ermöglicht es unseren Partnern, ihr Wachstum und ihre Rentabilität zu maximieren und gleichzeitig die Unternehmenssicherheit an neue Anforderungen anzupassen.
                                Netskope solutions
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.
                                  Technischer Support von Netskope
                                  Technischer Support von Netskope
                                  Überall auf der Welt sorgen unsere qualifizierten Support-Ingenieure mit verschiedensten Erfahrungen in den Bereichen Cloud-Sicherheit, Netzwerke, Virtualisierung, Content Delivery und Software-Entwicklung für zeitnahen und qualitativ hochwertigen technischen Support.
                                    Netskope-Video
                                    Netskope-Schulung
                                    Netskope-Schulungen helfen Ihnen, ein Experte für Cloud-Sicherheit zu werden. Wir sind hier, um Ihnen zu helfen, Ihre digitale Transformation abzusichern und das Beste aus Ihrer Cloud, dem Web und Ihren privaten Anwendungen zu machen.

                                      Keeping Your Data Safe in the “Gig Economy”

                                      Nov 25 2020

                                      As workforces continue to evolve and adapt to the COVID-19 pandemic, the door is open for organizations to hire workers from anywhere around the country to offer their skills remotely as needed, often as a freelancer or gig worker. While this outgrowth of the burgeoning gig economy stands to benefit many businesses in need, it’s important that you assess your risk of utilizing gig workers and freelancers.

                                      The “gig economy” refers to the trend of workers becoming independent contractors who freelance who use their skills to work for different companies at one time. The growth in online platforms and the acceptance of corporate remote workers make it easier than ever to work for multiple companies at the same time. The gig economy represents a big change in the way we think about and manage remote workers. More than one-third of US workers (36%) participate in the gig economy, either through their primary or secondary jobs, and more than 90% of Americans are open to freelancing or independent contract work. The entire world is wondering what the “New Normal” will look like, but most agree that we won’t see 100% of staff return to the office environment. Given the acceleration of remote workers and the growth of the gig economy demands a change in your data protection strategy. 

                                      Think about Uber, which uses algorithms to match gig workers with riders. Uber created an entirely new industry sector using gig “freelancers” to comprise the workforce. These independent contractors (currently under dispute in California) set their own schedules and use the Uber platform to connect with riders. This caused a fundamental shift in workers from full-time taxi drivers to an army of part-time Uber and Lyft drivers.  

                                      Changing concerns about access and control

                                      How does the gig economy differ from the contractors we have today? From an access and controls perspective, there may not initially seem like a lot of difference. Or is there?  

                                      In the past, we have hired contractors from a contracting firm where we vet the firm and require background checks on the contractors. Unlike regular vendors or contractors, who we require to have endpoint security controls in place such as endpoint detection and response (EDR), encrypted hard-drives, patch management, strong passwords, and use encrypted tunnels to access our systems, the new gig economy workers often do not have these controls on their systems. This is because they’re using their own personal device to work for multiple companies, which don’t adhere to any of the security requirements and cause headaches for security teams.

                                      In the gig economy, workers have flexibility with their schedule and workload, and organizations can benefit from the expertise of skilled workers in our fast-paced business digitalization environment. However, there are several unique security concerns and challenges to consider, such as: How much access do freelancers have to sensitive information? Are they accessing necessary data securely? How do security teams monitor threats for workers that may also be working for their competitor?

                                      Freelancers are likely working with many different companies at one time. With each of these companies and projects, they may store sensitive information on their systems.  If they are a specialist that you hire, they can reuse research, programming ideas, marketing concepts, etc., for another company, maybe even your competitor. This trend of utilizing gig economy workers is on the rise, and the pandemic has only accelerated things.

                                      Freelancing on company time 

                                      In another twist, it’s possible your full-time employees may be participating in the gig economy as well. As you combine the gig economy workforce with the growing remote workforce, a new threat vector emerges. When staff members are working in a traditional office there is a natural barrier to working on other company projects during the day. The LAN network security controls will limit their ability to access an external company’s systems. In open-concept offices having a conversation with another employer is difficult. But if they are working from home then how do you know whether they are working for other organizations or possibly even your competitor? Back to my earlier example, Uber drivers frequently also drive for Lyft too, direct competitors.

                                      The growth of the gig economy where freelancing has become the norm begs the question, how will companies understand what their staff is working on at home? A true contractor will work from a BYOD device and the appropriate controls will be put around their access and abilities to access sensitive data. But what about the full-time employee that decides to make some extra money at home by doing freelance work?  How do you detect that an employee is now spending a large percentage of their time working on another company’s projects?  

                                      The gig economy represents a new threat to the systems that are running in the remote work environment. How can you ensure that company secrets or intellectual property are not accidentally or purposefully being used to enhance other company’s products and services?

                                      Securing your information in the gig economy

                                      There isn’t a perfect strategy but certainly some essential capabilities to manage the security for the gig economy workers is Zero Trust Network Access (ZTNA) and active inline cloud monitoring and data protection. With ZTNA you can manage the access to key resources and adjust privileges based on behavior, device, location, and sensitivity of the data. With inline real-time cloud monitoring and user behavior analytics it is possible to detect changes in usage and prevent the movement of sensitive data. Implementing a cloud access service broker (CASB) solution with advanced data leakage prevention (DLP) will provide the required visibility and protection of your sensitive data. 

                                      It is time to revamp your insider threat program. Expect that you will have freelance gig workers on your sensitive projects with access to your sensitive data and they will be doing work for your competitor. Change the way your gig workers access and manipulate data by limiting access to your cloud collaboration systems.  Establish tightly bound controls around your sensitive information. Restrict editing, creating, and copying within the corporate-approved cloud collaboration system. Do not allow downloading. 

                                      I’m interested to hear ideas on how to detect a freelancer that may be using your sensitive information on other company projects, and how to protect your sensitive data for this unique type of user.

                                      This blog was originally published on Toolbox Security as “How to Maintain Data Security in the “Gig Economy””

                                      author image
                                      James Christiansen
                                      James Christiansen is Netskope’s VP of cloud security transformation and leader of the Global Chief Strategy Office. He is focused on enhancing Netskope’s global clients.
                                      James Christiansen is Netskope’s VP of cloud security transformation and leader of the Global Chief Strategy Office. He is focused on enhancing Netskope’s global clients.

                                      Bleiben Sie informiert!

                                      Abonnieren Sie den Netskope-Blog