Cyber security
22.12 2023

Cyber Security Expert: IT Hygiene Should Not Be Neglected During Holidays and Vacations

The line blurring between work and spare time, and the widespread use of remote work mean that people sometimes log in to their computers even during holidays and vacations. Mihkel Kukk, Head of Cyber Security Services at KPMG, points out that especially business users must take into account the risks associated with working outside the office.

Before vacations, companies should review plans for software updates of their systems and ensure that the organization's website will work. All this is necessary to avoid surprises while the employees responsible for IT matters are on vacation.

"It goes without saying that software and anti-virus programs must be updated in all circumstances. Outside the office, instead of a public and unsecured Wi-Fi network, you must use either mobile data or a VPN connection, which does not allow strangers to monitor internet traffic," Kukk says. It is also wise to encrypt your laptop hard drive. Screen lock, encryption and remote management must be used on the phone so that, if necessary, the location of the device can be detected or its contents remotely deleted to prevent data leakage.

Based on international studies done by KPMG, 90 percent of companies have faced at least one cyber attack, and 26 percent of those incidents forced companies to suspend their operations temporarily.

When logging in to your computer on an airplane, in a hotel lobby or some other public place, it is worth considering whether the documents to be opened and visible on the screen should be hidden from prying eyes. A screen filter helps hide content from others. "Also, it is not wise to leave your laptop unattended. Even if you only need to leave the computer for a moment, the screen lock opened with a code or your fingerprint must be turned on," the KPMG expert adds.

You should always treat links sent via email with caution. Most of us have come across threatening emails seemingly sent by "Estonian police" or well-known companies, the purpose of which is phishing or a ransomware attack. Unfortunately, time and again, we hear about cases where the recipient of an email has taken the bait of fraudsters.

Mihkel Kukk

Cybersecurity Strategic Advisor
mihkelkukk@kpmg.com
+372 521 4332

Neglecting cybersecurity can cause forced downtime and give competitors an advantage

Organizations can no longer view cyber risk as a separate issue; it is an integral part of the b..

Cyber security

KPMG: A properly selected information security standard serves as a quality mark for partners

Companies that rely on external service providers for data processing increasingly face a key que..

Cyber security

A threefold increase in cyber incidents creates a pressing need for a Chief Information Security Officer

Over the past few years, the number of cyber incidents in Estonia has tripled, and this worrying..

Cyberattack Cyber security

For a small business, a cyber incident can cost nearly €13,000 per day

Friday evenings, weekends, and holiday periods are the most attractive times to carry out cybera..

Cyber security Cyberattack

Cybersecurity Budget Is a Strategic Investment, not a Cost

At the end of the year, one question comes up in every board meeting: how much should the compan..

Cyber security

Are Your Company's Systems Actually Secure?

A penetration test reveals how resilient your information systems are against attacks. 

Cyber security

Provide a safe and sustainable business environment for your company. We help build a resilient and reliable digital landscape, even in the face of changing threats.

KPMG Baltics OÜ

+372 626 8700
cyber@kpmg.ee
Ahtri 4, 10151 Tallinn, Estonia
${item.title}
KPMG Baltics KPMG Global Privacy KPMG IT Audit
Email again:

Analysis of employee awareness

Analysis of employee awareness focuses on mapping the skills and increasing the competencies of the weakest link in cyber security: the users, the employees.

Email again:

Threat assessment

Threat assessment is a tactical and technical service that allows a company to get a quick overview of external threats.

Email again:

Maturity assessment

Maturity assessment helps plan IT investments and design further steps to mitigate vulnerabilities and ensure better security.

Email again: