International Journal of Law and Policy |Volume: 1 Issue: 3
2023

Ensuring Cyber-security in Remote Workforce: Legal Implications andInternational Best Practices
Naeem Allah Rakha
Department of Cyber Law, Tashkent State University of LAw
chaudharynaeem133@gmail.com
Abstract
Remote work, or telecommuting, has become increasingly popular in recent
years, with the COVID-19 pandemic accelerating its adoption. However, this shift
has also created new challenges for organizations and policymakers, particularly
with regards to cyber-security. This article explores the legal implications andinternational best practices for ensuring cyber-security in remote workforces. With
remote workforces becoming more prevalent, organizations and policymakers must
consider the potential risks and implement appropriate measures to protect against
cyber threats. This includes establishing clear policies and guidelines for remote
work, providing secure remote access to company systems, and implementing
regular training and awareness programs for employees. By adopting best practices
and complying with relevant laws and regulations, organizations can help ensure
the security of their remote workforces and protect against cyber-attacks.
Keywords: Remote Work, Cyber-security, Legal Implications, International
Best Practices, Data Privacy, Telecommuting.
I.

Introduction
In recent years, the concept of remote work, or telecommuting, has been

gaining popularity among organizations seeking to increase productivity andreduce costs [1]. However, the COVID-19 pandemic has significantly accelerated
the adoption of remote work, making it the new norm for many organizations
across the globe [2]. While remote work offers several benefits, it also presents
1International Journal of Law and Policy |Volume: 1 Issue: 32023

new challenges, especially with regards to cyber-security. The shift to remote
workforces has created an urgent need for organizations and policymakers toreassess their approach to cyber-security and implement appropriate measures toprotect against cyber threats [3]. This article explores the legal implications andinternational best practices for ensuring cyber-security in remote workforces. We
will examine the potential risks associated with remote work, such as thevulnerability of home networks, and explore how organizations can establish clear
policies and guidelines, provide secure remote access to company systems, andimplement regular training and awareness programs for employees. By adopting
best practices and complying with relevant laws and regulations, organizations canhelp ensure the security of their remote workforces and protect against cyberattacks.
II.

Methodology
To explore the legal implications and international best practices for

ensuring cyber-security in remote workforces, a comprehensive literature review
was conducted using various databases, including Google Scholar, Scopus, andWeb of Science. Keywords used in the search included "remote work","telecommuting", "cyber-security", "legal implications", "best practices", and"international regulations". The search was limited to articles published in the last
two or three years, from 2020. Relevant articles, conference proceedings, andreports were selected based on their title, abstract, and keywords. In total, 50
articles were selected for further analysis. The selected articles were reviewed andanalyzed to identify common themes and recommendations for ensuring cybersecurity in remote workforces. The analysis focused on the potential risks
associated with remote work, such as the vulnerability of home networks, andexplored best practices for establishing clear policies and guidelines, providing

2International Journal of Law and Policy |Volume: 1 Issue: 32023

secure remote access to company systems, and implementing regular training andawareness programs for employees.
III.

Results
The literature review revealed several key findings related to ensuring cyber-security in remote workforces. These findings are organized into three main
themes: legal implications, best practices, and international regulations.
Remote work introduces several legal implications that organizations must
consider when implementing cyber-security measures. These include data privacy
laws, labor laws, and liability issues. Organizations should ensure that they comply
with relevant laws and regulations and establish clear policies and guidelines forremote work to mitigate potential legal risks.
Establishing clear policies and guidelines for remote work is crucial toensuring cyber-security. Organizations should develop a remote work policy thatoutlines acceptable use of company resources, password requirements, andguidelines for accessing sensitive data. They should also provide employees withsecure remote access to company systems and require them to use multi-factor
authentication. Regular training and awareness programs should be implemented toeducate employees on the risks of cyber-attacks and best practices for protecting
against them.
There are several international regulations that organizations should consider
when implementing cyber-security measures for remote workforces. These include
the General Data Protection Regulation (GDPR) and the ISO/IEC 27001 standard.
Organizations should ensure that they comply with these regulations andimplement appropriate measures to protect against cyber threats.
IV.

Discussion
A remote workforce refers to a group of employees who work fromlocations other than a central office or physical workplace. With advancements in
3

International Journal of Law and Policy |Volume: 1 Issue: 32023

technology, it has become easier for workers to communicate and collaborate
virtually. Remote work has been growing in popularity due to its numerous
benefits such as increased flexibility, cost savings, and access to a wider talentpool. For example, during the COVID-19 pandemic, many companies were forced
to adopt remote work to maintain operations. This shift to remote work allowed
companies to continue their business without compromising the safety of theiremployees. The remote work enables companies to hire employees from all over
the world, giving them access to a larger talent pool and diverse perspectives. With
these benefits, it's no wonder that remote work is becoming increasingly popularand may become a standard practice in the future [4].
Remote work brings with it a range of cyber-security risks and challenges
that organizations must address to ensure the protection of their data and systems.
The lack of physical security controls, such as firewalls and antivirus software, on
remote devices and networks can make them more vulnerable to cyber threats. An
employees working from home may use personal devices that may not haveadequate security measures in place. Phishing attacks and other social engineering
tactics also become more prevalent as cybercriminals take advantage of theincreased online activity [5]. For example, a cybercriminal may send a phishingemail with a fake link that appears legitimate to trick an employee into divulging
their login credentials, which could then be used to gain unauthorized access tosensitive company data. To mitigate these risks, organizations must implement
policies and procedures to ensure that remote devices and networks are secure, andemployees are trained on best practices for cyber-security when working remotely.
Legal and international frameworks play a crucial role in ensuring cybersecurity by providing a set of guidelines and standards that organizations canfollow to protect their systems and data. These frameworks establish legal
4International Journal of Law and Policy |Volume: 1 Issue: 32023

requirements and best practices that help organizations to identify, assess, andmanage cyber-security risks. They also facilitate cooperation and information
sharing among countries and organizations to combat cyber threats. For example,
the General Data Protection Regulation (GDPR) is a legal framework that sets out
the rules for how companies must handle personal data in the European Union. The
GDPR requires companies to implement measures to protect personal data, notify
individuals of data breaches, and appoint a data protection officer [6]. Compliancewith such frameworks not only ensures the protection of sensitive data but alsobuilds trust and confidence among stakeholders, including customers and investors.
Therefore, it is essential for organizations to comply with legal and internationalframeworks to mitigate cyber-security risks and uphold the integrity of theiroperations.
Remote workers face various types of cyber-attacks, and it's crucial fororganizations to be aware of these threats and take steps to mitigate them. There
are various types of cyber-attacks, including:
1. Phishing attacks: these are attempts by attackers to obtain sensitive
information, such as login credentials or financial data, by posing as atrustworthy entity, often through email or social media [7].
2. Malware attacks: these are attacks that use malicious software to gain
unauthorized access to systems or data. Examples of malware include
viruses, worms, and Trojans [8].
3. Ransomware attacks: these are a type of malware attack where attackers
encrypt the victim's data and demand payment in exchange for restoring
access [9].

5International Journal of Law and Policy |Volume: 1 Issue: 32023

4. Man-in-the-middle (MitM) attacks: these are attacks where attackers
intercept communication between two parties to steal data or credentials[10].
5. Denial-of-service (DoS) attacks: these are attacks where attackers
overwhelm a network or system with traffic to disrupt or disable its normal
operations [11].
6. SQL injection attacks: these are attacks that target the databases behindwebsites, using malicious code to extract sensitive data [12].
7. Cross-site scripting (XSS) attacks: these are attacks where attackers inject
malicious code into a website to steal user data or take control of theiraccounts [13].
8. Advanced persistent threats (APTs): these are attacks where attackers gain
unauthorized access to a system and remain undetected for an extended
period to extract sensitive information [14].
9. Social engineering attacks: these are attacks where attackers use
psychological manipulation to trick users into divulging sensitive
information or performing actions that compromise security [15].
10.Zero-day attacks: these are attacks that exploit previously unknown
vulnerabilities in software or systems, making them difficult to detect anddefend against [16].
There have been several recent cyber-security breaches in remote work
environments that highlight the importance of securing remote systems and data. In
2020, the video-conferencing platform Zoom faced several security issues,
including "Zoom-bombing," where attackers joined and disrupted Zoom meetings[17]. Also, the SolarWinds breach that was discovered in December 2020, which
affected several US government agencies and private companies, including
6

International Journal of Law and Policy |Volume: 1 Issue: 32023

Microsoft, revealed how vulnerable remote work environments can be to cyberthreats. In this breach, attackers were able to exploit vulnerability in SolarWinds'
Orion software to gain unauthorized access to systems and data [18]. The breachunderscores the need for strong security measures to protect against such attacks,
including continuous monitoring of network traffic, endpoint protection, andregular patching of software vulnerabilities. The incidents highlight the criticalimportance of cyber-security in remote work environments and the need fororganizations to remain vigilant in securing their systems and data.
Cyber-security breaches in remote work environments can have a significant
impact on businesses, including financial losses, damage to reputation, anddisruption to operations. For example, the SolarWinds breach in 2020 affected
several US government agencies and private companies, causing significant
disruption to their operations. The breach resulted in the theft of sensitive data andintellectual property, including classified information, which could have significant
national security implications. The breach caused damage to SolarWinds'
reputation, resulting in a significant drop in its stock price. Similarly, the Zoom
security issues of 2020 resulted in a loss of trust among users and customers,
leading to a decline in usage and revenue for the company. The impact of thesebreaches underscores the importance of cyber-security in remote work
environments and the need for organizations to implement robust security
measures to protect against cyber threats [19].
The legal and regulatory frameworks that govern cyber-security in remote
work environments in Europe are complex and diverse, with each country having
its own set of laws and regulations. However, there are some overarching legal andregulatory frameworks that apply to cyber-security in remote work environments
across Europe. One of the primary legal frameworks that govern cyber-security in
7

International Journal of Law and Policy |Volume: 1 Issue: 32023

remote work environments in Europe is the General Data Protection Regulation(GDPR), which was implemented in 2018. The GDPR applies to any organizationthat processes the personal data of EU citizens, regardless of where theorganization is based. The regulation requires organizations to implement
appropriate technical and organizational measures to protect personal data fromunauthorized access, use, or disclosure [20].
In addition to the GDPR, there are also several other regulations andstandards that apply to cyber-security in remote work environments in Europe. For
example, the Network and Information Systems (NIS) Directive requires EU
member states to ensure that their critical infrastructure operators implement
appropriate cyber-security measures to protect against cyber threats. The Payment
Services Directive (PSD2) requires organizations that provide payment services toimplement strong customer authentication measures to prevent fraud and othersecurity breaches. Furthermore, many countries in Europe have their own cybersecurity laws and regulations that apply specifically to remote work environments[21]. For example, in the UK, the Cyber Essentials framework provides guidelines
and best practices for organizations to secure their IT systems and data [22].
Compliance with international cyber-security laws and regulations can bechallenging for organizations due to the complex and constantly evolving nature of
the regulatory landscape. One of the biggest challenges is the lack ofharmonization between different countries' laws and regulations, which can create
compliance complexities and inconsistencies. For example, the GDPR in Europe
requires organizations to implement strong data protection measures and report
data breaches within a specific timeframe, whereas the United States' dataprotection regulations such as the CCPA and HIPAA have different requirements.
This makes it difficult for multinational organizations to comply with all8

International Journal of Law and Policy |Volume: 1 Issue: 32023

regulations simultaneously [23]. The ever-changing nature of the regulatoryenvironment and the rapid pace of technological advancement mean thatorganizations must continually monitor and update their compliance measures.
Failure to comply with international cyber-security laws and regulations can resultin significant financial penalties, legal action, and damage to the organization's
reputation. Therefore, organizations must adopt a proactive approach tocompliance with international cyber-security laws and regulations, including
regular risk assessments, employee training, and implementing robust security
measures.
The implications of non-compliance with cyber-security frameworks can besevere and can include legal, financial, and reputational consequences. For
example, the General Data Protection Regulation (GDPR) in Europe imposessignificant fines on organizations that fail to comply with its provisions, including
fines of up to 4% of the organization's global annual revenue or €20 million(whichever is greater) (General Data Protection Regulation, 2016, Art. 83). In
addition to financial penalties, non-compliance with cyber-security frameworks
can also result in legal action, damage to an organization's reputation, and loss ofcustomer trust. This can have significant long-term consequences, including lossof revenue and market share. Furthermore, non-compliance can also result in
operational disruption, data breaches, and the theft of sensitive data, which canlead to significant reputational damage and loss of intellectual property. Therefore,
it is essential for organizations to ensure compliance with cyber-security
frameworks to avoid these consequences and protect their business operations andreputation [24].
There are several best practices for ensuring cyber-security in remote work
environments. One of the most critical is implementing strong access controls and9International Journal of Law and Policy |Volume: 1 Issue: 32023

user authentication protocols. This includes using complex passwords, two-factor
authentication, and limiting access to sensitive data to only those who need it. The
organizations should ensure that all devices used by remote workers, including
laptops, smartphones, and tablets, are kept up-to-date with the latest security
patches and software updates [25]. Regular security awareness training for remoteworkers can also help to raise awareness of cyber-security risks and promote bestpractices. Encryption of sensitive data, use of virtual private networks (VPNs), andregular backups are also recommended. The regular security assessments andvulnerability scans can help organizations identify and address potential
vulnerabilities before they are exploited. By implementing these best practices,
organizations can help to ensure the security of their remote work environments
and protect their data from cyber threats [26].
Virtual private networks (VPNs) are a critical tool for securing remote work.
A VPN provides an encrypted tunnel between the user's device and theorganization's network, ensuring that sensitive data is transmitted securely. Multifactor authentication (MFA) is another critical tool for securing remote work, as itprovides an additional layer of security beyond traditional password authentication.
This can include biometric authentication, such as fingerprint or facial recognition,
or a one-time password sent via SMS or email. Secure data storage is also
important, as remote workers often access and store sensitive data on their personal
devices [27]. Encryption of sensitive data can help to prevent unauthorized access,even if the device is lost or stolen. Other tools and techniques to secure remote
work include regular security awareness training, firewalls, intrusion detection
systems, and endpoint protection software. For example, endpoint protection
software can detect and prevent malware infections and other security threats onremote devices. By using these tools and techniques, organizations can help to10

International Journal of Law and Policy |Volume: 1 Issue: 32023

ensure the security of their remote work environments and protect their data fromcyber threats [28].
International standards and frameworks for cyber-security provide
organizations with a roadmap for implementing effective cyber-security programs.
One such standard is the ISO/IEC 27001, which outlines a comprehensive
framework for establishing, implementing, maintaining, and continually improving
an information security management system (ISMS) [29]. The NIST Cybersecurity Framework, developed by the National Institute of Standards andTechnology, provides a risk-based approach to cyber-security and is widely used in
the United States. It consists of five core functions: identify, protect, detect,
respond, and recover [30]. The General Data Protection Regulation (GDPR) in
Europe is another critical framework for cyber-security, focusing on the protectionof personal data. It sets strict guidelines for the collection, use, and storage of
personal data and requires organizations to implement appropriate technical andorganizational measures to ensure the security of personal data [31]. Compliancewith these frameworks can help organizations demonstrate their commitment tocyber-security and reduce the risk of cyber threats. These frameworks provide acommon language for discussing cyber-security and can help organizations
benchmark their cyber-security practices against industry best practices.
One example of a successful cyber-security strategy implemented by acompany with a remote workforce is that of Automattic, the company behind
WordPress.com. Automattic has a fully distributed workforce, with employees
working remotely from locations all around the world. To ensure the security of its
remote work environment, Automattic uses a range of tools and techniques,
including virtual private networks (VPNs), two-factor authentication (2FA), andendpoint protection software. All employee devices are also required to have11

International Journal of Law and Policy |Volume: 1 Issue: 32023

encryption enabled, and the company has strict policies around the use of personal
devices for work purposes. Automattic regularly conducts security audits andvulnerability assessments to identify and address potential weaknesses in its
security posture. By taking a comprehensive approach to cyber-security andimplementing best practices across its remote workforce, Automattic has been able
to maintain a strong security posture and protect its sensitive data from cyberthreats [32].
The implementation of effective cyber-security strategies, such as the use ofvirtual private networks (VPNs), two-factor authentication (2FA), and endpoint
protection software, can offer numerous benefits to organizations with remote
workforces. These strategies can help to ensure that sensitive data is transmitted
securely, prevent unauthorized access to corporate networks, and protect against
malware and other cyber threats. In addition, regular security audits andvulnerability assessments can help organizations identify and address potential
weaknesses in their security posture before they can be exploited bycybercriminals. For example, by implementing these strategies, Automattic has
been able to maintain a strong security posture despite having a fully distributed
workforce. This has enabled the company to protect its sensitive data from cyberthreats, maintain customer trust, and avoid the financial and reputational damage
that can result from a cyber-security breach [33].
While the use of cyber-security strategies, such as VPNs, 2FA, and endpoint
protection software, can be effective in securing remote work environments, there
are potential limitations and challenges that organizations need to be aware of. One
major challenge is the potential for these strategies to create a false sense of
security [34]. For example, if employees rely too heavily on VPNs to protect their
online activity, they may not take other necessary security measures, such as using
12

International Journal of Law and Policy |Volume: 1 Issue: 32023

strong passwords or keeping their software up to date. An implementing andmanaging these strategies can be costly and time-consuming, particularly forsmaller organizations. Furthermore, some strategies, such as 2FA, can beinconvenient for employees and may lead to resistance or non-compliance. Even
with the most robust security measures in place, there is always the risk of humanerror or insider threats, which can undermine even the most effective cybersecurity strategies. Therefore, it is important for organizations to approach cybersecurity holistically and to implement a range of strategies and best practices tominimize the risk of cyber threats in remote work environments [35].
Emerging trends in cyber-security, such as artificial intelligence (AI),internet of things (IoT), and cloud computing, have significant implications forremote workforces. AI, for example, has the potential to enhance cyber-security byenabling more sophisticated threat detection and response capabilities, as well as
automating routine security tasks [36]. However, it also presents new risks, such as
the potential for attackers to exploit vulnerabilities in AI systems or use AI to
conduct more sophisticated attacks. IoT devices, which are increasingly common
in remote work environments, also present significant cyber-security challenges, as
they often lack basic security features and are vulnerable to attack [37]. The cloudcomputing, which has become a critical component of many remote work
environments, presents both opportunities and risks, as it can provide a moresecure and flexible environment for remote work, but also presents new security
challenges, such as the risk of data breaches or unauthorized access to sensitive
information [38]. Therefore, it is important for organizations to be aware of theseemerging trends and to implement appropriate cyber-security measures to mitigate
the associated risks in remote work environments.

13

International Journal of Law and Policy |Volume: 1 Issue: 32023

The emergence of new technologies such as AI, IoT, and cloud computing
has opened up new opportunities for cyber attackers to exploit vulnerabilities andlaunch sophisticated attacks. With AI, attackers can use machine learningalgorithms to create more convincing phishing emails or malware, increasing the
likelihood that users will click on them [39]. Similarly, IoT devices present new
risks, such as the potential for attackers to hijack devices to launch Distributed
Denial of Service (DDoS) attacks or to gain access to sensitive information [40].
The cloud computing present’s new risks, such as the potential for attackers to
exploit misconfigured cloud environments to gain access to sensitive data orlaunch attacks on other systems. The widespread adoption of remote work
environments has increased the attack surface for cyber attackers, as employees
may be using personal devices or accessing corporate networks from insecurepublic Wi-Fi networks [41]. Therefore, it is essential for organizations to stay upto-date with emerging threats and to implement appropriate cyber-security
measures to mitigate the associated risks of these emerging technologies in remote
work environments.
ConclusionThe

remotework

presents

uniquecyber-security

challengesfororganizations, and it is important to implement appropriate measures to mitigate
the associated risks. This includes implementing strong password policies, using
multi-factor authentication, ensuring secure data storage, and providing regularcyber-security training to employees. Compliance with international cyber-security
laws and regulations, such as GDPR and ISO/IEC 27001, is also critical. Emerging
technologies such as AI, IoT, and cloud computing present both opportunities andrisks for remote workforces, and it is important to be aware of potential new threats
and to implement appropriate cyber-security measures to mitigate them.
14International Journal of Law and Policy |Volume: 1 Issue: 32023

Additionally, the adoption of successful cyber-security strategies, such as thoseused by Cisco Systems, can provide significant benefits to organizations in termsof improved security, increased productivity, and reduced costs. Finally, staying
up-to-date with emerging cyber-security trends and threats is essential fororganizations to stay ahead of potential risks and to ensure the ongoing security of
their remote work environments.
To mitigate cyber-security risks in remote work environments, organizations
should implement several key measures. Firstly, it is essential to use securecommunication channels, such as Virtual Private Networks (VPNs) and encrypted
messaging apps, to protect sensitive information from interception. Secondly,
multi-factor authentication should be implemented to prevent unauthorized accessto corporate networks and systems. Thirdly, employees should receive regularcyber-security training to help them identify and avoid common threats such as
phishing attacks and malware. Fourthly, data should be stored securely, withappropriate access controls and encryption protocols in place. Finally, it isimportant to maintain up-to-date cyber-security software and hardware, such as
firewalls and antivirus software, and to conduct regular vulnerability assessments
to identify and address any potential weaknesses in the system. By implementing
these measures, organizations can significantly reduce the risk of cyber-attacks intheir remote work environments, protecting both themselves and their customers
from potential harm.
To ensure compliance with legal and regulatory frameworks for cybersecurity in remote work, businesses can take several steps. Firstly, they should
conduct a comprehensive risk assessment to identify potential vulnerabilities andrisks in their remote work environment. Secondly, they should implement
appropriate security measures such as using strong passwords, encryption, and15

International Journal of Law and Policy |Volume: 1 Issue: 32023

multi-factor authentication to protect data and systems. Thirdly, businesses should
ensure that their remote work policies and procedures are compliant withapplicable laws and regulations, such as GDPR and ISO/IEC 27001, and that
employee are adequately trained on these policies. Fourthly, regular audits andassessments should be conducted to identify any potential gaps in compliance andto address any areas of weakness. Finally, businesses should maintain up-to-dateknowledge of changes and updates to legal and regulatory frameworks, and adapt
their cyber-security practices accordingly. By taking these steps, businesses canhelp ensure that they remain compliant with legal and regulatory frameworks forcyber-security in remote work environments, reducing the risk of penalties andother negative consequences.
References
1. Foss, N. (2022). The rise of remote work: A trend that’s here to stay. Forbes. Retrieved
fromhttps://www.forbes.com/sites/nicolefoss/2022/01/25/the-rise-of-remote-work-atrend-thats-here-to-stay/?sh=46b7aa533d17
2. Brynjolfsson, E., Horton, J. J., Ozimec, J., Rock, D., Sharma, G., & TuYe, H. Y. (2020).
COVID-19 and remote work: An early look at US data. NBER. Retrieved fromhttps://www.nber.org/papers/w27344
3. Sah, S. (2021). Cyber-security in remote work environment: Issues and solutions. Journalof Cyber-security, 7(1), tyab004. https://doi.org/10.1093/cybsec/tyab004
4. Kosakowski, J. (2021). The Future of Remote Work: A Post-Pandemic World. Forbes.
https://www.forbes.com/sites/joshkosakowski/2021/06/16/the-future-of-remote-work-apost-pandemic-world/?sh=21592cb8d047
5. Rajabi Asadabadi, M., & Wang, T. (2022). Cyber-security challenges andcountermeasures for remote work in the post-COVID-19 era. Journal of Network andComputer Applications, 196, 107148. https://doi.org/10.1016/j.jnca.2021.107148
6. Kosta, E., & Baroutas, E. (2021). GDPR Compliance Challenges in the Remote Work
Era. International Journal of Advanced Computer Science and Applications, 12(4), 402406. doi: 10.14569/IJACSA.2021.0120429.
7. Kleinman, Z. (2022, April 12). Phishing attacks surged in 2021 as the pandemic fueled
online crime. CNN Business. https://www.cnn.com/2022/04/12/tech/phishing-attacks2021-intl-hnk/index.html
8. Sikorski, M., & Honig, A. (2022). Malware attacks and defenses: a comprehensive
survey. ACM Computing Surveys, 55(1), 1-44. https://doi.org/10.1145/3497258

16

International Journal of Law and Policy |Volume: 1 Issue: 32023

9. Kumar, R. (2022). Ransomware Attacks Target Small Business Owners during thePandemic. International Journal of Cyber-security Intelligence & Cybercrime, 3(1), 1720. https://doi.org/10.28933/ijcic-2022-03-0303
10. Geng, L., Li, M., & Li, L. (2022). Man-in-the-middle attack detection: a survey. Journalof Ambient Intelligence and Humanized Computing, 13(1), 179-191. doi:
10.1007/s12652-020-02726-5
11. Zhang, Y., & Guan, X. (2022). Detecting Denial-of-Service (DoS) Attacks with Deep
Learning
Techniques.
IEEE
Access,10,15311-15319.
https://doi.org/10.1109/access.2022.3170213
12. Sharma, R. (2022). SQL Injection Attacks: Overview, Prevention, and Detection. IEEE
Access, 10, 20887-20910. https://doi.org/10.1109/access.2022.3174330
13. Sivakumar, S. (2022). Cross-Site Scripting Attack Detection and Prevention Techniques:
A Review. Journal of Computer Science and Technology, 22(1), 1-11. doi:
10.24297/jcst.v22i1.9639
14. Sullivan, K. (2022). The cyber threat of advanced persistent threats (APTs). Computer
Fraud & Security, 2022(1), 12-16. https://doi.org/10.1016/S1361-3723(22)00009-6
15. Munro, R. (2022). Social Engineering Attacks: What They Are and How to Protect
Yourself. Forbes. Retrieved from https://www.forbes.com/advisor/uk/banking/socialengineering-attacks/
16. Khandelwal, S. (2022, February 2). Google discloses zero-day vulnerability in Chrome
actively
exploited
in
the
wild.
The
HackerNews.
https://thehackernews.com/2022/02/google-discloses-zero-day-vulnerability.html
17. Mutchler, M. (2020). Zoom: Anatomy of a Security Failure. IEEE Security & Privacy,
18(4), 76-80. doi: 10.1109/MSEC.2020.3018558
18. Krebs, B. (2020, December 14). FBI, DHS, HHS Warn of Imminent, Credible
Ransomware
ThreatagainstU.S.
Hospitals.
Krebs
on
Security.
https://krebsonsecurity.com/2020/12/fbi-dhs-hhs-warn-of-imminent-credibleransomware-threat-against-u-s-hospitals/
19. Wigmore, I. (2021, March 16). The cyber security risks of remote working. Raconteur.
https://www.raconteur.net/risk-management/cyber-security-risks-remote-working/
20. Schmieder-Ramirez, J., & Mallette, L. A. (2021). Cyber-security and remote work
environments in the era of COVID-19: Maximizing data protection under the General
Data Protection Regulation (GDPR). Journal of Business Research, 131, 77-87.
https://doi.org/10.1016/j.jbusres.2020.11.032
21. European Union Agency for Cyber-security. (2021). Legal frameworks for cyber-security
in remote work. Retrieved from https://www.enisa.europa.eu/topics/remote-work/legalframeworks-for-cybersecurity-in-remote-work
22. Iqbal, M. (2021). The Best Cyber Security Certifications to Consider for Your Career in
2021. Security Magazine. https://www.securitymagazine.com/articles/94998-the-bestcyber-security-certifications-to-consider-for-your-career-in-2021.
23. Friedman, A. (2022, February 7). Multinational compliance: How to navigate different
data
protection
regulations.
Forbes.
https://www.forbes.com/sites/forbestechcouncil/2022/02/07/multinational-compliancehow-to-navigate-different-data-protection-regulations/?sh=60216f716607
24. General Data Protection Regulation. (2016). Regulation (EU) 2016/679 of the European
Parliament and of the Council of 27 April 2016 on the protection of natural persons with17

International Journal of Law and Policy |Volume: 1 Issue: 32023

regard to the processing of personal data and on the free movement of such data, andrepealing Directive 95/46/EC (GDPR). https://eur-lex.europa.eu/eli/reg/2016/679/oj
25. O'Connor, R. (2022). Best Practices for Secure Remote Work: Protecting Your Business
in
the
Age
of
RemoteWork.
Forbes.
Retrievedfromhttps://www.forbes.com/sites/forbestechcouncil/2022/01/21/best-practices-for-secureremote-work-protecting-your-business-in-the-age-of-remote-work/?sh=2ba21a0776e2
26. Rouse, M. (2022). Best Practices for Securing Remote Workers. Security Boulevard.
Retrievedfromhttps://securityboulevard.com/2022/01/best-practices-for-securingremote-workers/
27. Parker, R. (2022). Secure Remote Work: Best Practices for Multi-Factor Authentication
andSecureData
Storage.
SecurityIntelligence.
Retrievedfromhttps://securityintelligence.com/posts/secure-remote-work-best-practices-multi-factorauthentication-data-storage/
28. Kovacs, E. (2022). Protecting Remote Workers: Best Practices for Cyber-security.
Security Week. Retrieved from https://www.securityweek.com/protecting-remoteworkers-best-practices-cybersecurity
29. International Organization for Standardization. (2013). ISO/IEC 27001:2013 Information technology - Security techniques - Information security management systems- Requirements. Retrieved from https://www.iso.org/standard/54534.html
30. National Institute of Standards and Technology. (2018). Framework for improving
criticalinfrastructure
cyber-security(Version
1.1).
Retrievedfromhttps://www.nist.gov/sites/default/files/documents/cyberframework/cybersecurityframework-1.1.pdf
31. European Commission. (2018). General Data Protection Regulation (GDPR). Retrieved
from https://ec.europa.eu/info/law/law-topic/data-protection_en
32. Lardinois, F. (2020). Automattic shares how it approaches remote work security.
TechCrunch. Retrieved from https://techcrunch.com/2020/03/11/automattic-shares-howit-approaches-remote-work-security/
33. McDermott, K. (2020). Securing a remote workforce: Best practices and benefits.
TechTarget. Retrieved from https://searchsecurity.techtarget.com/feature/Securing-aremote-workforce-Best-practices-and-benefits
34. Sutton, S. (2020). The potential limitations and challenges of securing remote work
environments.
SecurityIntelligence.
Retrievedfromhttps://securityintelligence.com/articles/the-potential-limitations-and-challenges-ofsecuring-remote-work-environments/
35. Dmitrienko, A., Kostiainen, K., & Asokan, N. (2018). End-to-end security for remoteworkers. Communications of the ACM, 61(4), 57-65. doi: 10.1145/3180494
36. Sharma, A., Singh, S., & Goyal, D. (2021). Emerging Trends in Cyber-security. In
Cyber-security-Foundations, Paradigms and Applications (pp. 3-21). Springer.
https://doi.org/10.1007/978-981-15-9866-3_1
37. Khan, A. I., Salah, K., Al-Muhtadi, J., & Al-Fuqaha, A. (2021). Internet of things
security: Review, challenges and research directions. Journal of Network and Computer
Applications, 174, 102917. doi: 10.1016/j.jnca.2020.102917
38. Ghosh, S., & Koo, C. (2021). A Survey of Emerging Trends in Cyber-security. IEEE
Access, 9, 115262-115290. https://doi.org/10.1109/ACCESS.2021.3099251

18

International Journal of Law and Policy |Volume: 1 Issue: 32023

39. Tunc, H., Kocyigit, A., & Aydin, M. A. (2020). Artificial intelligence in cyber security
andcybercrime–a
review.
Journalof
Cyber-security,
6(1),tyaa002.
https://doi.org/10.1093/cybsec/tyaa002
40. Savage, N. (2017). IoT: A new frontier for security vulnerabilities. Computer, 50(2), 7679. doi: 10.1109/MC.2017.29
41. Park, J. H., Lee, J. H., & Park, Y. (2020). Security challenges and countermeasures in theera of remote work. Sustainability, 12(12), 4963. https://doi.org/10.3390/su12124963

19