Tackling Cyber Risk With Chrome Enterprise

Chrome enables enterprise productivity. It brings the helpfulness of Google to the enterprise, supporting more productive and secure ways to work in the cloud. 

Chrome_Enterprise_Logo.png

Google Chrome Enterprise

Video02_Still_Titlecard_V2_copy.jpg

Title.jpg

large

medium

<h6>“Security leaders today cannot afford to continue without having a robust browser security strategy,” says Eisinger. All enterprises should follow the simple first steps to browser security: switching on the free, in-browser security settings and downloading the latest version with updated security fixes. But many enterprises fail to take even these basic steps, leaving their networks exposed to attack.&nbsp;</h6><h6></h6><h6>Businesses using Chrome Enterprise can activate some of the browser’s security controls at no extra cost and centrally manage browsers across the organization with Chrome’s cloud-based management tool.</h6>

Google_ChromeEnterprise_QuickSight01_Shot04_02_copy.jpg

Artboard.jpg

A Cyber-Secure Future of Work

Hero_Mobile_Google_Wave1.jpg

Inline_Desktop_1_Google_Wave1_–_7.png

Inline_Mobile_1_Google_Wave1_–_7.png

Inline_Desktop_2_Google_Wave1.png

Inline_Mobile_2_Google_Wave1.png

Why Browsers Are the First Line of Defense for Enterprise Cybersecurity

Hero_Desktop_Google_Wave1.jpg

Hero_Social_Google_Wave1.jpg

Hero_Thumbnail_Google_Wave1.jpg

Bring Your Own Device (BYOD) has become ingrained in company culture, with 70% of businesses enabling employees to work from a personal device, according to Bitglass’s 2021 BYOD Security Report. Unfortunately, personal devices are also the weakest link in the security chain. LayerX reports that over half of these devices lack the browser cyber defenses that are de rigueur on corporate computers. One area of risk is that many employees work on outdated browsers, which often lack the most up-to-date security patches, leaving their devices exposed should they accidently access malicious sites or files.&nbsp;With remote work blurring the line between home and the office, many workers are also playing mix-and-match with their data, accessing personal data on work devices, or corporate data on private devices—a practice that makes it easier for cybercriminals to steal credentials to access company data.&nbsp;Unmanaged devices not only leave companies vulnerable to malware and data breaches, they are also difficult for IT teams to track and manage. Nearly half of organizations report being unsure if any of the BYOD in their ecosystem downloaded malware from the web in the last 12 months, according to Bitglass—a dangerous lack of visibility that leaves companies, and their data, exposed.

Google_CBE_QS1_D.png

Google_CBE_QS1_M.png

Google_CBE_QS1_D.mp4

Google_CBE_QS1_M.mp4

Security teams can’t protect what they can’t see. And while managing every employee’s personal smartphone and laptop is untenable, getting oversight of their browsers is not.&nbsp;“People want to access their work apps on their phones or from their personal computers at home, and that just becomes an overload of devices for IT to manage,” says Lauren Miskelly, Managing Director at Chrome Enterprise. “If companies can manage security at the browser level, versus the device level, that takes some of the overhead away for IT.”Chrome Enterprise helps companies do just that by providing security professionals a centralized cloud-management solution that gives them oversight of their cloud environment across devices. With Chrome Enterprise’s cloud management, IT teams can gain visibility into potential risks, including password reuse, malware transfer, visits to unsafe sites, as well as which versions of Chrome are installed across their organization.Chrome Enterprise also leverages its scale and expertise to provide companies with an extra line of defense. Google has dedicated teams tracking zero-day vulnerabilities, pushing out fast and automatic updates that keep organizations’ Chrome browser fleet up-to-date. Chrome Enterprise also employs security tools powered by learnings from its billions of web users.&nbsp;“We use AI to be able to say, ‘Is that site, or that file or download malicious? And how do we protect our users against that?” says Miskelly.

Once security teams have better visibility into what’s happening across both unmanaged and managed devices, they can start enforcing better cyber hygiene across BYOD through adaptive policy management.&nbsp;IT can also group employees by role or security risk and apply bespoke policies accordingly. These policies can protect web users from malware by blocking untrusted file downloads and extensions or by preventing access to unsafe URLs. They can also stop breaches before they happen by blocking certain users from uploading sensitive company data.“A big challenge for IT is knowing what is actually happening in the browser. Are users on the latest version of Chrome? Are they downloading extensions that might be malicious?” asks Miskelly. “A lot of what Chrome Enterprise does is allow IT to set controls and policies to make sure those things don’t happen in the corporate environment.”

Are Enterprises Protected From the Threats Lurking on the Web?

Companies are operating in one of the most innovative eras in history, with worldwide IT spending projected to hit a staggering $3.25 trillion in 2023, according to the International Data Corporation (IDC). While technologies like AI, 5G and IoT prove game-changing to enterprises, they are also expanding the attack surface for cybercrime.&nbsp;On average, security teams have to manage and secure nearly 400,000 assets at any given time, 60% of which originate from the cloud, according to JupiterOne. This ballooning of assets, and the vulnerabilities they bring, comes at a time when the cybersecurity industry is reaching worldwide burnout. There is a global shortage of 3.4 million cybersecurity jobs, according to the 2022 (ISC)2 Cybersecurity Workforce Study. Two-thirds of security teams say they are understaffed, with another two-thirds reporting they have unfilled vacancies.&nbsp;With existing teams taking on a larger workload with smaller staff, it’s imperative that the security tools they use are as efficient as possible, doing double-time on their behalf.

Google_CBE_QS2_D.png

Google_CBE_QS2_M.png

Google_CBE_QS2_D.mp4

Google_CBE_QS2_M.mp4

Emerging technologies are making businesses increasingly flexible, and more reliant on devices—McKinsey estimates that 50 billion devices will be connected to the Internet of Things (IoT) by 2025. But for companies that don’t have their cloud assets under control, this can spell trouble. Devices are one of the most vulnerable asset classes for security teams to manage, representing <a href="https://info.jupiterone.com/scar-2023" target="_blank">96% of critical security findings</a>. They are also a primary target for bad actors. In 2021, 25% of organizations that suffered a cyber attack said the attack targeted a mobile device, according to <a href="https://www.forrester.com/report/the-future-of-employee-computing/RES142617" target="_blank">Forrester</a>.“Whether you adopt new AI or ML models into your business strategy, you need to make sure you set up the right security framework so you feel confident making some of those bigger bets without bringing too much risk into your environment,” says Lauren Miskelly, Managing Director at Chrome Enterprise.A centralized control panel that allows teams to view and manage their expanding cloud assets is the backbone of a good security framework. Chrome Browser Cloud Management provides a single console to empower IT with greater visibility and control over their organization’s cloud environment.

Visibility is only the first step in helping IT teams get a handle on the growing number of assets they need to manage. The next is improving efficiency to alleviate some of the burden faced by overtaxed security personnel.&nbsp;Chrome Enterprise uses AI and ML to provide browser-based threat detection and data protection capabilities that proactively address many of the biggest pain points that security teams face. Chrome’s built-in security features prohibit malware transfers, block users from visiting phishing URLs and prevent leakage of sensitive data, providing a first line of defense that frees up infosec teams.&nbsp;“We wanted to give IT something that’s really important to them—visibility and control—without adding a bunch more work to their already busy plates,” says Miskelly.

Emerging Technology Can Leave Businesses More Exposed to Cyber Attacks

As companies push innovation, their digital infrastructure is getting more complex. Organizations use an <a href="https://www.mulesoft.com/press-center/feb-2022-connectivity-benchmark-report" target="_blank">average of 1,061 different applications</a> to juggle business functions. This complexity is taking a toll on employees: 90% report feeling information overload at work as a result of digital innovation, while 87% say they struggle to keep pace with rapid change, according to Pega’s 2022 Workforce Trends Report. The increasingly frenetic nature of work is causing many employees to cut corners in the race toward deadlines.Tired and overworked employees can be just as dangerous to companies as outdated cybersecurity tools. Ponemon found that 62% of cyberattacks attributed to insiders are due to negligence rather than malicious intent, and according to the Verizon 2023 Data Breach Investigations Report, 74% of all breaches—whether a result of phishing, malware or stolen credentials—include the human element.&nbsp;

Google_CBE_QS3_D.png

Google_CBE_QS3_M.png

Google_CBE_QS3_D_1.mp4

Google_CBE_QS3_M.mp4

Cybercriminals are adept at exploiting these vulnerabilities, targeting employees and the tools and devices they use to get work done fast.&nbsp;Phishing represents one of the most effective methods of attack: In 2021, 84% of companies experienced a successful email-based phishing attack in which an employee was tricked into a risky action, according to Verizon. Phishing is also the second most expensive, averaging $4.76 million per breach, according to IBM’s 2023 Cost of a Data Breach Report.One reason employees are still falling victim to phishing attacks is that they wrongly assume their employer’s security measures are robust enough to protect them. In a recent Proofpoint study, 49% of respondents said they thought their organization’s safety measures would prevent any dangerous emails getting into their inbox. But a recent <a href="https://info.armis.com/rs/645-PDC-047/images/State-Of-Enterprise-IoT-Security-Unmanaged-And-Unsecured.pdf" target="_blank">Forrester report</a> found that at 69% of organizations, more than half of devices are unmanaged, limiting IT teams’ ability to provide protection.&nbsp;As companies move more of their processes to the web, bad actors are following suit. According to Verizon, over 60% of breaches hit companies via hacking from Web applications—more than any other access point.&nbsp;Chrome Enterprise guards organizations against lapses in security—and judgment—by folding personal devices into the broader corporate security network. By providing security at the browser level and leveraging AI and ML to block malware transfers and prevent users from uploading sensitive corporate data, Chrome Enterprise proactively prevents employees from accidentally compromising their company.“Chrome Enterprise protects businesses by protecting the users. We have built-in security in the browser to keep a user safe from going to malicious sites, or downloading malicious things,” says Lauren Miskelly, Managing Director at Chrome Enterprise.

As businesses continue to innovate, they must minimize the complexity of their digital ecosystem—for security’s sake. Chrome Enterprise helps IT teams secure the growing number of applications in their organization’s tech stack through integrations that give security teams control over a wider network.&nbsp;Leveraging partnerships with a range of providers, like Splunk, CrowdStrike and Palo Alto Networks, Chrome provides the ability for IT teams to streamline browser data across security tools.&nbsp;With more securities in place across more web applications, employees are better protected while they work, even at high speed—no matter how complex their company’s cloud environment becomes.&nbsp;“The stakes are high, because everything moves so fast with technology, and tech leaders need to be thinking a few steps ahead of their users,” says Miskelly. “But when it comes to innovation and security, I don’t think it’s an ‘either/or,’ I think it’s an ‘and.’ Chrome Enterprise actually allows people to use more innovative tools, because they know the security features are built-in.”