DEFENSE STRATEGIES AGAINST SOCIAL ENGINEERING IN HOME OFFICE WORK ENVIRONMENTS

Abstract

Defensive information security actions in the corporate environment involve people, physical and technological resources. In this sense, in addition to technologies and tools, policies and procedures must be adopted to guide employees of organizations in their daily work tasks. Parallel to the security scenario, the pandemic caused by the SARS-CoV-2 virus that started in the year 2020, forced several organizations around the world to adopt home office work regimes. Soon this situation made information systems and communication between employees more vulnerable to social engineering attacks because people are outside the physical perimeter of organizations. In short, an updated information security policy shared among the employees of organizations is essential to reduce the chances of suffering cyber-attacks. Given the context, this article aims to present an overview of companies in the city of Catanduva (São Paulo) that have adopted a home office work regime and the knowledge that their employees have in relation to the information security policy in force in their environments. Work. In this sense, we believe that the results of this work can guide information technology managers in conducting their security policies and foster future academic work related to social engineering.