Increased Digital adoption raises security issues: IBM 

Image credit: iStock

IBM Security had announced the results of a global survey examining consumers’ digital behaviors during the pandemic and their potential long-term impact on cybersecurity.

With society becoming increasingly shifting to digital-first interactions, the study found that preferences for convenience often outweighed security and privacy concerns among individuals surveyed, leading to poor choices around passwords and other cybersecurity behaviors, the company said.

The relaxed approach of consumers to security with rapid digital transformation by businesses during the pandemic may lead attackers to propagate cyberattacks across industries from ransomware to data theft.

According to IBM Security X-Force, bad personal security habits may also carry over to the workplace and can lead to costly security incidents for companies, with compromised user credentials representing one of the top root sources of cyberattacks reported in 2020.

The global survey of 22,000 individuals in 22 markets, conducted by Morning Consult on behalf of IBM Security, identified the following effects of the pandemic on consumer security behaviours.

Individuals surveyed created 15 new online accounts during the pandemic on average, equating to billions of new accounts created around the world.

With 44 percent reporting that they do not plan to delete or deactivate these new accounts, these consumers will have an increased digital footprint for years to come, greatly expanding the attack surface for cybercriminals.

The surge in digital accounts led to lax password behaviors among those surveyed, with 82 percent of respondents admitting to reusing credentials at least some of the time.

This means that many of the new accounts created during the pandemic likely relied on reused email and password combinations, which may have already been exposed via data breaches over the past decade.

More than half (51 percent) of millennials surveyed would rather place an order using a potentially insecure app or website, rather than call or go to a physical location in person.

With these users more likely to overlook security concerns for the convenience of digital ordering, the burden of security will likely fall more heavily on companies providing these services to avoid fraud.

“The pandemic led to a surge in new online accounts, but society’s growing preference for digital convenience may come at a cost to security and data privacy. Organizations must now consider the effects of this digital dependence on their security risk profile.

With passwords becoming less and less reliable, one way that organizations can adapt, beyond multi-factor authentication, is shifting to a zero-trust approach applying advanced AI and analytics throughout the process to spot potential threats, rather than assuming a user is trusted after authentication,” said Charles Henderson, Global Managing Partner and Head of IBM Security X-Force.

The survey further underlined consumer behaviors impacting the cybersecurity landscape today and moving forward.

As individuals increasingly embrace digital interactions in more realms of their lives, the survey found that many have also become primed with high expectations for ease of access and use.

According to the survey, most adults (59 percent) expect to spend less than 5 minutes setting up a new digital account.

Globally, respondents would attempt 3-4 logins before resetting their passwords. These resets not only cost companies money, but they can also pose security threats if used in combination with an already compromised email account.

44 percent of respondents store online account information in their memory (the most common method) while 32 percent write this information on paper.

While password reuse is a growing problem, adding an additional factor of verification for higher-risk transactions can help reduce the risk of account compromise.

The survey found that around two-thirds of global respondents had used multi-factor authentication within the past few weeks of being surveyed.

Digital Healthcare

During the pandemic, digital channels became an important area to address massive demands for COVID-19 vaccines, testing and treatment.

Consumers’ adoption of a wide variety of digital channels for COVID-19-related services may spur greater digital engagement with healthcare providers moving forward by lowering the barrier for entry among new users, according to IBM Security analysis.

 According to the survey:

63 percent of respondents engaged with pandemic-related services via some form of the digital channel (web, mobile app, email, and text message).

While websites/web apps were the most common method of digital engagement, mobile apps and text messages also received significant usage – with 39 percent and 20 percent engaging via these channels, respectively.

The report further added that as healthcare providers push further into telemedicine, it will become increasingly important for their security protocols to be designed to withstand this shift – from keeping critical IT systems online to protecting sensitive patient data and continued HIPAA compliance.

This includes data segmentation and implementing strict controls so that users can only access specific systems and data, limiting the impact of a compromised account or device.

To prepare for the event of ransomware and extortion attacks, patient data should be encrypted, preferably at all times, and there must be reliable backups in place so that systems and data can be quickly restored with minimal interruption.

The concept of digital health passes, or so-called vaccine passports, introduced consumers to a real-world use case for digital credentials, which offer a technology-based approach to verify specific aspects of our identity.

The survey further pointed that 65 percent of adults globally say they are familiar with the concept of digital credentials, and 76 percent would be likely to adopt them if they became commonly acceptable.

This exposure to the idea of digitised proof of identity during the pandemic may help spur wider adoption of modernized systems of digital identity, which could potentially replace the need for traditional forms of ID like passports and driver’s licenses, offering a way for consumers to provide the limited information required for a specific transaction.

While leveraging a digital form of identity has the potential to create a sustainable model for the future, security and privacy measures must be put in place to help protect against counterfeiting calling for the capabilities of blockchain solutions to verify and provide the ability to update these credentials in the event they are compromised, the report added.

Publish on W.Media
Author Info - W.Media
Share This Article
Other Popular Posts