Remote workers 'less disciplined' on IT security

Research from technology company Cisco found that homeworkers were lax when it came to opening emails and attachments from unknown sources, and that some were even using work laptops to hijack their neighbours wireless internet connections.

Cisco claimed the study, which looked at remote workers' security awareness and online behaviour in a number of countries, including the UK, highlighted a need for "greater diligence" towards IT security.

"While working at home, people tend to let their guard down more than they do at the office, so adhering to security policies doesn't always intuitively seem applicable or as necessary in the private confines of one's home," said John Stewart, Cisco's chief security officer.

"The blurring of the lines between work and home, and between business lives and personal lives, presents a growing challenge for businesses seeking to capitalise on the productivity benefits of the remote workforce."

Personal use

One of the key findings of the study was that remote workers felt less urgency to be vigilant when online. Although the majority believed they were more vulnerable outside the office than in, their perception of IT security threats in general was "softening", according to the research.

Cisco said that while internet based threats were becoming more dangerous, they were also becoming more covert and less visible, and that this could be one reason why employees were increasingly displaying "a false sense of comfort" about IT security.

Almost half (48%) of UK remote workers questioned admitted to opening emails and attachments from unknown or suspicious sources.

More than ever were also using work computers and devices for personal use, according to the study. Cisco added the study had shown homeworkers were more willing to allow members of their family or friends to use company IT equipment - up from 6% of UK based workers in 2006, to 22% last year.

Globally, 12% of remote workers confessed to accessing their neighbour's wireless internet connection using work equipment. In the UK this had risen to 11% in 2007 from 6% in 2006.

'Human challenge'

Other problems highlighted in the study included visiting social networking websites via company networks and accessing work files on company networks using personal, non-IT-protected devices.

John Stewart urged employers to raise the issue of IT security awareness and to educate workers rather than simply seeking technological solutions.

"This research stresses the point that managing corporate security is part technology, part process, part awareness, education and communication," he said.

"It's often more of a human challenge than a technical one and because of that, IT has the duty to emerge from the traditional back office to become more proactively engaged and consultative with its user base."