Information Assurance Services

COVID-19 doesn’t create new information security risks it simply exacerbates the risks common in most companies. Cyber criminals and state-sponsored hacking groups never let a good disaster go to waste. As companies move to teleworking to protect their people from coronavirus infection, the distributed workforce exponentially increases the target opportunities for cyberattacks and security breaches.

COVID-19’s #1 cyber threat – Phishing attacks

Phishing is the fraudulent practice of sending emails disguised as communications from reputable companies or individuals to trick people into revealing passwords, credit card numbers or other sensitive personal information.

Clients should be on the look out for fake email notices from legit agencies such as the CDC, taxing authorities or even business partners. These emails can carry malware designed to compromise data or extort payment via ransomware or other means. Often perpetrators leverage compromised accounts to distribute malicious emails inside and outside an organization

Aprio’s Information Assurance Services team helps clients identify and mitigate information security risks though assurance services including risk assessments, attestation and audit protocols including SOC reporting, ISO 27001, PCI DSS, HITRUST and NY-DFS.