Palo Alto Networks: 1 in 3 SMEs not confident in hybrid work security

Global cybersecurity leader  Palo Alto Networks  revealed in its 2023 State of Cybersecurity in ASEAN Report that one out of three small and medium enterprises (SMEs) in the Philippines and Southeast Asia is not confident in tracking cybersecurity breaches amid a hybrid work environment.

With 41% of their infrastructure and processes running in the cloud for onsite and work-from-home setup, SMEs are most concerned about password attacks (63%), malware attacks (56%), and account takeovers (53%).

Steven Scheurmann, Vice President for ASEAN at Palo Alto Networks, shared, “In observance of Cybersecurity Awareness Month this October, we are reinforcing our mission of  empowering SMEs with a stronger cybersecurity posture, recognizing their pivotal role as the backbone of our economy. It’s crucial to remember that SMEs, just like larger organizations, hold valuable data sought after by cyber attackers for financial gain.”

For two years in a row, adopting cloud security has been a top cybersecurity strategy for SMEs. However, hybrid work continues to pose challenges for SMEs in securing their cloud applications and services due to risks associated with unsecured home networks and personal devices.

These risks include data breaches, which can threaten both SME employees and customers, potentially leading to identity theft and unauthorized financial transactions. These vulnerabilities make it challenging for almost one-third of SMEs to procure a broader range of cybersecurity solutions for hybrid work.

To stay ahead of threats, Scheurmann underscored non-negotiables that SMEs should look for when securing cloud infrastructure in hybrid environments.

Holistic visibility of network traffic.  Imagine your company’s network as a bustling airport, where employees work from different ‘terminals’ or physical locations, such as offices, homes, or remote sites. The challenge resembles airport security—knowing who’s allowed to board ‘network flights’ and who’s not. The airport needs to have visibility on every ‘passenger’ (devices and users) and verify their ‘boarding passes’ (access permissions). This holistic visibility ensures SMEs that only authorised users and