Close Menu
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Facebook X (Twitter) LinkedIn
Facebook X (Twitter) LinkedIn
Information Security BuzzInformation Security Buzz
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Subscribe
Information Security BuzzInformation Security Buzz
Home - Study & Research - Companies Warned Of Cyber Security Dangers Caused By Employees Working While On Holiday
Study & Research

Companies Warned Of Cyber Security Dangers Caused By Employees Working While On Holiday

ISBuzz TeamBy ISBuzz TeamJuly 27, 2017Updated:July 5, 20246 Mins Read
Share LinkedIn Twitter Facebook Copy Link Email
30-Day Cybersecurity Sprint
Share
Facebook Twitter LinkedIn Email Copy Link
Quick AI Summary
ChatGPTClaudeGeminiGrokPerplexityDeepSeekCopilot

T-Systems ), the corporate IT and cyber-security arm of Deutsche Telekom (Europe’s largest telecoms company), is warning organisations of the security risks associated with allowing employees to work while on their summer holiday.

Where employees absolutely must interrupt their summer vacation to email and work remotely, T-Systems says it is essential those employees have had recent cyber-security training, or they risk compromising business security and confidentiality.

Scott Cairns, the UK head of cyber security at T-Systems, said:

“Time away from our hectic work life should be treasured, not spoilt by an expectation we will respond to work emails and requests. Putting aside the impact on our families, this practice also creates a real cyber-security threat for organisations.

“Our research shows a third of employees use free Wi-Fi at locations such as those at airports, hotels, coffee shops and bars, despite these being unsecure and open to communication interception by cyber criminals. Couple this with the widespread practice of employees emailing documents to their private email on their own devices, where security is invariably lower, and you open your organisation to potential attacks.

“Our message to businesses for the holiday season is ‘let your employees enjoy an uninterrupted break’. Strongly discourage them from taking work on holiday, and make sure employees do not feel pressured to work when they should be taking time out.

“Where it is unavoidable, businesses should ensure there is training, and clear guidelines to be followed. This training is particularly important, as our research shows many employees are not knowledgeable on the multitude of ways their devices can be infected with viruses and malware… and those who thought they were ‘very knowledgeable’ frequently gave the wrong answer when questioned!”

Scott Cairns added: “We’ve already begun to see the financial impact these malware attacks have had on multinationals in 2017, including Reckitt Benckiser and Mondelez (the maker of Cadbury chocolate).  Reckitt disclosed to the Financial Times this month that it expected sales would be hit by an estimated £110m this year as a direct result.

“Employees can be an easy scapegoat for poor corporate cyber-security practice, however many do not receive adequate training from their employer. Our research found that despite the pace at which cyber-attacks are evolving, 66% of respondents had received no up-to-date education within the past twelve months. Nearly 30% of respondents say they have never had cyber security education at any employer.

“Training your employees regularly on effective cyber-security practice is probably the single-most effective step organisations can undertake to dramatically reduce their risks of viruses, malware and other common forms of cyber-crime.”

T-Systems’ research was conducted by respected market research agency Censuswide into over 2,000 UK employees.  Its findings include:

  • Nearly a third of employees (31%) use free Wi-Fi hotspots, and nearly a quarter (24%) use them for work-related emails and documents.  These are a big danger area as they are insecure and easy for hackers to clone (getting access to all email and web traffic, including any work documents and passwords)
  • 28% of employees email work documents to and from their personal email, despite this creating numerous security problems.
  • 10% use free USB charging points at airports and stations.  These ports can be used to transfer viruses and malware to unsuspecting users
  • The blame, however, cannot solely be placed on the employees, remarkably 28% of employees have never in their working career had any cyber security trainingto protect themselves and their employer, as you can see the threats are avoidable

Cyber-security training for all employees is particularly important as the dangers continue when employees come home from holiday.  T-Systems’ research found that:

  • 18%of employees admit to connecting their digital camera to their work computer to download photos.  And don’t think that Wi-Fi and Bluetooth connections are safer, viruses and malware can just as easily transfer through wireless connections and then quickly spread through the organisation.
  • 15% admit to connectingUSB sticks and memory cards that they share with their family members to their work computer.  A sure way for viruses to quickly spread from home to business.

About T-Systems:

With a footprint in more than 20 countries, 43,700 employees, and external revenue of 7.9 billion euros (2016), T-Systems – Deutsche Telekom’s business customer division – is one of the world’s leading providers of digital services.

About T-Systems’ cyber-security research:

The research was conducted on behalf of T-Systems by accredited research agency Censuswide in May 2017, based on a representative panel of 2,050 full-time workers.  Breakdowns of the research are available by region, business size, Male/Female and private/public sector.

About T-Systems: T-Systems company profile

T-Systems research – the key facts:

T-Systems research – the key facts:

Table 1 – Poor cyber security practice is common:

I use my personal phone and / or PC / laptop for my work email 31.60%
I email work documents to my personal email address 27.90%
I use free Wi-Fi hot spots (in cafes, stations, etc) when using my personal phone and / or laptop for work (e.g. email, documents, etc) 23.80%
I use my personal PC / laptop for work productivity (e.g. Word, PowerPoint etc) 22.90%
I use free Wi-Fi hot spots (in cafes, stations, etc) when using my office phone / tablet / laptop for work (e.g. email, documents, etc) 15%
I use USB charging points at airports / stations for my work laptop, tablet and / or phone 9.80%
I use the same passwords at work as at home 6.80%
I do at least one of the above 66.40%

Table 2 –  Which of the following do you connect to the Desktop/ laptop computer that you use for work (whether you are in the office, your home, or elsewhere)?

Type of device Number of household with them
My mobile phone via a cable 28.60%
Digital camera to download photos 18.40%
Memory sticks and cards (also known as USB sticks) I share with other employees 18%
Memory sticks and cards (also known as USB sticks) I share with people at home 15.10%
Other electronic devices (e.g. Dictaphones) 3.50%
None of the above 45.50%
Table 3 –  When was the last time you had cyber security training at your work?
In the past 6 months, please specify in months 8.40%
In the past 7-12months 25.40%
In the past 13-24 months 9.70%
Over 2 years ago 7.80%
So long ago I can’t remember when 5.70%
Never at my current employer (but had some at a previous employer) 3.70%
Never at any employer 28.40%
N/A I don’t use a Desktop, laptop or smartphone for work 11.00%
ISBuzz Team
  • ISBuzz Team
    Air Canada Data Breach: BianLian Extortion Group Claims A Massive Heist Contrary To Airline’s Earlier Statement
  • ISBuzz Team
    Unprecedented DDoS Attack Rocks The Web: Tech Giants Reveal A Digital Tsunami
  • ISBuzz Team
    CISA Flags High-Severity Adobe Acrobat Reader Flaw Amid Active Exploits
  • ISBuzz Team
    Curl Security Alert: Patching A Critical Bug Averting Potential Cyber Catastrophe

The opinions expressed in this post belong to the individual contributors and do not necessarily reflect the views of Information Security Buzz.

Share. Facebook Twitter LinkedIn Email Copy Link

Related Posts

The Real Cost of Inconsistent Third-Party Access

December 18, 20255 Mins Read

What Happens When Devices Cross Borders? The Role of Geofencing in Global IT

August 7, 20256 Mins Read

The Evolving Importance of Identity Governance in FinTech

July 10, 20258 Mins Read
ISB-Bora-Side-Bar

No se ha podido establecer conexión. Error 429

 
ISB-Bora-Side-Bar
Black ISB Logo

Information Security Buzz is an independent resource that provides the experts’ comments, analysis, and opinion on the latest Cybersecurity news and topics

X (Twitter) LinkedIn Facebook RSS

Working With Us

  • About Us
  • Advertise With Us
  • Contact Us

Write For Us

  • How To Contribute

The Pages

  • Privacy Policy
  • Cookie Policy
  • AI Policy
  • Terms & Conditions
  • Copyright Notice

Information Security Buzz and all its contents are copyright © 2014-2025. All rights reserved. All third-party trademarks are recognized.

Type above and press Enter to search. Press Esc to cancel.

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}