Keeping online events safe

2020 was a year of upheaval in almost every way, and the business world has been forced to rapidly adapt to meet the novel demands of an isolated, online workforce.

Virtual work has now become a standard part of day-to-day operations, and a facet of this new landscape is seeing the events, seminars and symposiums we had scheduled finding their way online to avoid continued safety and travel restrictions.

The ability of technology to ensure events such as these still happen – keeping businesses and connections alive as a result – is a wonderful thing.

However, with this shift from physical to online there is a simultaneous change in security considerations, and plans must be adapted accordingly.

Considering this new context, it’s important to remember that operational risks do not disappear – they just migrate to a different space.

The challenges that arise in the virtual world may be ones businesses have never encountered before, and that’s where we can come in.

Over the course of last year, Vanguard Risk has been supporting event organisers establish security controls for the conferences, meetings and symposiums taking place is this new environment.

Vigilance in keeping these events safe is an imperative, and while our vulnerabilities online are not always visible, this doesn’t make them any less real or urgent.

We decided to here collate some of the best pointers on how to prepare for the unexpected, and keep your event as safe in the virtual world as you would in the physical.

What can you do?

As your event transitions to the online realm, it is important not to drop your guard, and to maintain consistent coordination in the controls you put in.

When exercising risk management, establishing the context will inform the evaluation and subsequent controls to manage the threat.

Security requirements will change depending on the nature and size of the event, and each need individual assessment. Yet whether it’s a sporting event, concert or conference, preparing yourself for potential challenges is a necessity for all organisers. So, what can you do to keep your guests, and yourself, safe?

• Understand the risk context – this will inform your controls and your investment. You may need some specialist advice for this, so consider engaging a cyber security consultant.
• Underpin your approach by the principal of Defence in Depth. This provides a comprehensive approach for such events.
• Host your event on a suitable platform such as MS Azure or AWS – these offer a range of products for your needs.
• Map end-point vulnerabilities.
• Identity and Access Management (IAM): monitor attendees; implement a strong registration system; set policies to create boundaries for different entities in the system (controlling different types of users).
• Encrypt data – both in transit and while idle.
• Conduct penetration testing.
• Ensure guests have the exact website addresses linked to the event, to avoid guests’ accidental use of copy-cats.
• Establish random passwords/meeting ID’s.
• Recommend/share up to date antivirus software with guests, to protect the site from their end.
• Share safety tips with your attendees – for instance advice on how to spot phishing emails, have a safety team on hand to deal with any security requests/concerns.

Yet even with all the right technology in place, it’s often the human factor that can pose the greatest risk.

This is why appropriate policies, procedures and education across your organisation is so crucial – what you click on can have significant consequences, and it’s vital your team is up to date on protocols.

If you’re in need of assistance on how to adapt operational and security systems to fit your unique circumstances, please contact us on: 1300 847 475 or contact@vanguardrisk.com.au