Blogs

4 minutes

Enhance Security Where Its Most Vulnerable The Desktop

Enhance security where it’s most vulnerable  the desktop

Desktop virtualisation is not a magic fix for security, but it provides a another barricade against escalating cyber threats that have been increasingly focused on remote working.

Security experts including Interpol reported that cyber criminals switched their tactics during the pandemic and targeted home workers. For companies that made ad hoc investments in cheap laptops, or worse, relied on employees to use their own devices that were often out of date, it was a perilous time. Endpoint security is always a challenge; with the pandemic it became a nightmare.

At Ergo we have been running webinars on desktop virtualisation and best-practice security, not just as an expedient to address Covid but as a strategy for the future workplace. If ever there was a moment when an investment in virtual desktops paid dividends it was during lockdown, but if the workplace moves permanently to a hybrid combination of office and home – as many predict – the benefits will be delivered long into the future.

Ergo’s Security Practice has been advising clients to rethink and reset their cyber defences for some time. We know that the desktop is a weak link in many organisations and that desktop virtualisation goes some way to mitigating the risks.

Beef up security with centralised control

Desktop virtualisation delivers more standardised security in a tightly controlled environment that counters ‘shadow IT’ and helps IT managers take back control. Security patches and automated updates are applied regularly and seamlessly. Instead of fixing a breach hundreds of times on individual devices, they are fixed once and for all.

Lower the risk of losing sensitive data 

Desktop virtualisation is about centrally storing digital assets – files, emails and documents – minimising the data footprint and threat surface of a business. Sensitive information and company IP will stay safe, even if a laptop is lost, stolen or broken. Access controls allow for uninstalling the desktop from people’s devices if they leave, eradicating the risk of company data walking out the door with them.

Set device strategies and enforce them

The last few years has seen organisations struggle to implement Bring Your Own Device (BYOD) and Choose Your Own device policies. What employees want can be difficult for IT to administer, particularly around security. Virtualising desktops enables a consistent set of security controls across mobile devices, regardless of operating system or hardware.

Let virtual desktop providers share the security burden

With Desktop-as-a-Service (DaaS), the virtual desktop infrastructure is hosted in a cloud where the cloud provider offers levels of security and data protection that most enterprises would struggle to emulate on premise or in their data centres. Better regulatory governance around workflows and processes will emanate from cloud providers that will be ISO and PCI compliant.

No interruptions to business

Faster and simpler Disaster Recovery and Business Continuity is another benefit of virtual desktops. With desktop images stored and managed off-premise, natural disasters like flood and fire might take out premises but not virtual infrastructure. No more waiting around for backups to be restored. Employees can work from alternate locations and instantly have the exact same desktop experience.

Add additional security controls

Desktop virtualisation security can be tailored to different business needs. Additional layers can be added around data loss prevention and access permissions, including more advanced MFA (Multifactor Authentication). The type of desktop virtualisation that companies pursue will be determined by their security and regulatory requirements.

Financial services organisations, for example, that are restricted from moving applications and services to the cloud because of compliance requirements, will hit a similar obstacle with DaaS, where the desktop virtualisation infrastructure is hosted in the cloud. Hybrid offerings using Virtual Desktop Infrastructure (VDI) are an option, where the service is run from a server in a private data centre, delivering on the benefits and the compliance requirements.

As with other cloud services, it is important for companies to remember that DaaS does not exonerate them from security responsibilities. While the cloud provider will secure the big ticket items – network, host data centre, physical hosts and the virtualisation control plane – it’s up to each organisation to take care of endpoint security, deployment configurations, app security and identity management.

Conclusion

Desktop virtualisation is not a magic fix for security, but it provides a another barricade against escalating cyber threats that have been increasingly focused on remote working. For the IT team, it reasserts control over applications and the desktop at a time when mobility and shadow IT has threatened to undermine them – and the security of the organisation.

Related Blogs

                            Array
(
    [ID] => 75244
    [id] => 75244
    [title] => Getting started with Azure AI
    [filename] => AzureMSP_BlogBanner_1V02_240627.png
    [filesize] => 1775714
    [url] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627.png
    [link] => https://ergotechnologygroup.com/insights/blogs/business-continuity-disaster-recovery-azure/attachment/azuremsp_blogbanner_1v02_240627/
    [alt] => Azure Ai
    [author] => 18
    [description] => 
    [caption] => 
    [name] => azuremsp_blogbanner_1v02_240627
    [status] => inherit
    [uploaded_to] => 75235
    [date] => 2024-06-27 14:47:07
    [modified] => 2024-08-20 10:45:44
    [menu_order] => 0
    [mime_type] => image/png
    [type] => image
    [subtype] => png
    [icon] => https://ergotechnologygroup.com/wp-includes/images/media/default.png
    [width] => 1976
    [height] => 721
    [sizes] => Array
        (
            [thumbnail] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627-150x150.png
            [thumbnail-width] => 150
            [thumbnail-height] => 150
            [medium] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627-300x109.png
            [medium-width] => 300
            [medium-height] => 109
            [medium_large] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627-768x280.png
            [medium_large-width] => 768
            [medium_large-height] => 280
            [large] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627-1024x374.png
            [large-width] => 1024
            [large-height] => 374
            [1536x1536] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627-1536x560.png
            [1536x1536-width] => 1536
            [1536x1536-height] => 560
            [2048x2048] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627.png
            [2048x2048-width] => 1976
            [2048x2048-height] => 721
        )

)
1
                            
Azure Ai

Blogs

Understanding BCDR in Azure: Ensuring Business Resilience

                            Array
(
    [ID] => 84255
    [id] => 84255
    [title] => AzureMSP_BlogBanner_9_240910 (1)
    [filename] => AzureMSP_BlogBanner_9_240910-1.png
    [filesize] => 1781983
    [url] => https://ergotechnologygroup.com/wp-content/uploads/2024/09/AzureMSP_BlogBanner_9_240910-1.png
    [link] => https://ergotechnologygroup.com/insights/blogs/app-modernisation-with-azure/attachment/azuremsp_blogbanner_9_240910-1/
    [alt] => 
    [author] => 18
    [description] => 
    [caption] => 
    [name] => azuremsp_blogbanner_9_240910-1
    [status] => inherit
    [uploaded_to] => 84254
    [date] => 2024-09-11 09:08:34
    [modified] => 2024-09-11 09:08:34
    [menu_order] => 0
    [mime_type] => image/png
    [type] => image
    [subtype] => png
    [icon] => https://ergotechnologygroup.com/wp-includes/images/media/default.png
    [width] => 1976
    [height] => 721
    [sizes] => Array
        (
            [thumbnail] => https://ergotechnologygroup.com/wp-content/uploads/2024/09/AzureMSP_BlogBanner_9_240910-1-150x150.png
            [thumbnail-width] => 150
            [thumbnail-height] => 150
            [medium] => https://ergotechnologygroup.com/wp-content/uploads/2024/09/AzureMSP_BlogBanner_9_240910-1-300x109.png
            [medium-width] => 300
            [medium-height] => 109
            [medium_large] => https://ergotechnologygroup.com/wp-content/uploads/2024/09/AzureMSP_BlogBanner_9_240910-1-768x280.png
            [medium_large-width] => 768
            [medium_large-height] => 280
            [large] => https://ergotechnologygroup.com/wp-content/uploads/2024/09/AzureMSP_BlogBanner_9_240910-1-1024x374.png
            [large-width] => 1024
            [large-height] => 374
            [1536x1536] => https://ergotechnologygroup.com/wp-content/uploads/2024/09/AzureMSP_BlogBanner_9_240910-1-1536x560.png
            [1536x1536-width] => 1536
            [1536x1536-height] => 560
            [2048x2048] => https://ergotechnologygroup.com/wp-content/uploads/2024/09/AzureMSP_BlogBanner_9_240910-1.png
            [2048x2048-width] => 1976
            [2048x2048-height] => 721
        )

)
1
                            

Blogs

Revolutionising Legacy Apps: A Deep Dive into App Modernisation with Azure

                            Array
(
    [ID] => 82145
    [id] => 82145
    [title] => Web Banner (2)
    [filename] => Web-Banner-2.png
    [filesize] => 1172033
    [url] => https://ergotechnologygroup.com/wp-content/uploads/2024/08/Web-Banner-2.png
    [link] => https://ergotechnologygroup.com/events/microsoft-fabric-webinar/attachment/web-banner-2-2/
    [alt] => 
    [author] => 18
    [description] => 
    [caption] => 
    [name] => web-banner-2-2
    [status] => inherit
    [uploaded_to] => 81337
    [date] => 2024-08-29 14:44:08
    [modified] => 2024-08-29 14:44:08
    [menu_order] => 0
    [mime_type] => image/png
    [type] => image
    [subtype] => png
    [icon] => https://ergotechnologygroup.com/wp-includes/images/media/default.png
    [width] => 1500
    [height] => 867
    [sizes] => Array
        (
            [thumbnail] => https://ergotechnologygroup.com/wp-content/uploads/2024/08/Web-Banner-2-150x150.png
            [thumbnail-width] => 150
            [thumbnail-height] => 150
            [medium] => https://ergotechnologygroup.com/wp-content/uploads/2024/08/Web-Banner-2-300x173.png
            [medium-width] => 300
            [medium-height] => 173
            [medium_large] => https://ergotechnologygroup.com/wp-content/uploads/2024/08/Web-Banner-2-768x444.png
            [medium_large-width] => 768
            [medium_large-height] => 444
            [large] => https://ergotechnologygroup.com/wp-content/uploads/2024/08/Web-Banner-2-1024x592.png
            [large-width] => 1024
            [large-height] => 592
            [1536x1536] => https://ergotechnologygroup.com/wp-content/uploads/2024/08/Web-Banner-2.png
            [1536x1536-width] => 1500
            [1536x1536-height] => 867
            [2048x2048] => https://ergotechnologygroup.com/wp-content/uploads/2024/08/Web-Banner-2.png
            [2048x2048-width] => 1500
            [2048x2048-height] => 867
        )

)
1
                            

Blogs

Unlock Business Potential: An Introduction to Microsoft Fabric

                            Array
(
    [ID] => 75242
    [id] => 75242
    [title] => AzureMSP_BlogBanner_2V02_240627
    [filename] => AzureMSP_BlogBanner_2V02_240627.png
    [filesize] => 2064609
    [url] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_2V02_240627.png
    [link] => https://ergotechnologygroup.com/insights/blogs/cloud-migration-with-azure-landing-zone/attachment/azuremsp_blogbanner_2v02_240627/
    [alt] => 
    [author] => 18
    [description] => 
    [caption] => 
    [name] => azuremsp_blogbanner_2v02_240627
    [status] => inherit
    [uploaded_to] => 75213
    [date] => 2024-06-27 14:44:50
    [modified] => 2024-06-27 14:44:50
    [menu_order] => 0
    [mime_type] => image/png
    [type] => image
    [subtype] => png
    [icon] => https://ergotechnologygroup.com/wp-includes/images/media/default.png
    [width] => 1976
    [height] => 721
    [sizes] => Array
        (
            [thumbnail] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_2V02_240627-150x150.png
            [thumbnail-width] => 150
            [thumbnail-height] => 150
            [medium] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_2V02_240627-300x109.png
            [medium-width] => 300
            [medium-height] => 109
            [medium_large] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_2V02_240627-768x280.png
            [medium_large-width] => 768
            [medium_large-height] => 280
            [large] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_2V02_240627-1024x374.png
            [large-width] => 1024
            [large-height] => 374
            [1536x1536] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_2V02_240627-1536x560.png
            [1536x1536-width] => 1536
            [1536x1536-height] => 560
            [2048x2048] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_2V02_240627.png
            [2048x2048-width] => 1976
            [2048x2048-height] => 721
        )

)
1
                            

Blogs

How Ergo ensures Azure Landing Zones are always fit for purpose

                            Array
(
    [ID] => 81043
    [id] => 81043
    [title] => Azure Arc Blog Banner
    [filename] => AzureMSP_BlogBanner_4V02_240627.png
    [filesize] => 2008966
    [url] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_4V02_240627.png
    [link] => https://ergotechnologygroup.com/insights/blogs/azure-arc-a-bridge-to-hybrid-and-multicloud-management/attachment/azuremsp_blogbanner_4v02_240627/
    [alt] => Azure Arc with Ergo
    [author] => 18
    [description] => 
    [caption] => 
    [name] => azuremsp_blogbanner_4v02_240627
    [status] => inherit
    [uploaded_to] => 75262
    [date] => 2024-08-20 11:08:27
    [modified] => 2024-08-20 11:09:08
    [menu_order] => 0
    [mime_type] => image/png
    [type] => image
    [subtype] => png
    [icon] => https://ergotechnologygroup.com/wp-includes/images/media/default.png
    [width] => 1976
    [height] => 721
    [sizes] => Array
        (
            [thumbnail] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_4V02_240627-150x150.png
            [thumbnail-width] => 150
            [thumbnail-height] => 150
            [medium] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_4V02_240627-300x109.png
            [medium-width] => 300
            [medium-height] => 109
            [medium_large] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_4V02_240627-768x280.png
            [medium_large-width] => 768
            [medium_large-height] => 280
            [large] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_4V02_240627-1024x374.png
            [large-width] => 1024
            [large-height] => 374
            [1536x1536] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_4V02_240627-1536x560.png
            [1536x1536-width] => 1536
            [1536x1536-height] => 560
            [2048x2048] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_4V02_240627.png
            [2048x2048-width] => 1976
            [2048x2048-height] => 721
        )

)
1
                            
Azure Arc with Ergo

Blogs

Azure Arc: a bridge to hybrid and multicloud management

                            Array
(
    [ID] => 75244
    [id] => 75244
    [title] => Getting started with Azure AI
    [filename] => AzureMSP_BlogBanner_1V02_240627.png
    [filesize] => 1775714
    [url] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627.png
    [link] => https://ergotechnologygroup.com/insights/blogs/business-continuity-disaster-recovery-azure/attachment/azuremsp_blogbanner_1v02_240627/
    [alt] => Azure Ai
    [author] => 18
    [description] => 
    [caption] => 
    [name] => azuremsp_blogbanner_1v02_240627
    [status] => inherit
    [uploaded_to] => 75235
    [date] => 2024-06-27 14:47:07
    [modified] => 2024-08-20 10:45:44
    [menu_order] => 0
    [mime_type] => image/png
    [type] => image
    [subtype] => png
    [icon] => https://ergotechnologygroup.com/wp-includes/images/media/default.png
    [width] => 1976
    [height] => 721
    [sizes] => Array
        (
            [thumbnail] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627-150x150.png
            [thumbnail-width] => 150
            [thumbnail-height] => 150
            [medium] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627-300x109.png
            [medium-width] => 300
            [medium-height] => 109
            [medium_large] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627-768x280.png
            [medium_large-width] => 768
            [medium_large-height] => 280
            [large] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627-1024x374.png
            [large-width] => 1024
            [large-height] => 374
            [1536x1536] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627-1536x560.png
            [1536x1536-width] => 1536
            [1536x1536-height] => 560
            [2048x2048] => https://ergotechnologygroup.com/wp-content/uploads/2024/06/AzureMSP_BlogBanner_1V02_240627.png
            [2048x2048-width] => 1976
            [2048x2048-height] => 721
        )

)
1
                            
Azure Ai

Blogs

Getting started with Azure AI services