If you notice uncharacteristically low activity and noise levels throughout the office this week, don’t worry. You haven’t mistakenly come into work on a weekend or a surprise holiday — it’s time for March Madness!

The NCAA men’s basketball tournament, one of the most watched and bet-on sporting events of the year, is about to tip off, and enterprise productivity is about to get rejected, with an estimated $1.9 billion lost this year. Due to a partnership between CBS Sports, Turner Sports and the NCAA providing unprecedented levels of access — including the availability of all 67 games online — even more employees than ever (nearly 100 million) are expected to be distracted by March Madness this year.

While the distractions and the significant bandwidth strains associated with following March Madness can damage organizations, there is another more dangerous issue lurking in the crowd that organizations with bring-your-own-device (BYOD) policies and enterprise IT should be particularly wary about: mobile security threats.

Mobile Devices and Malicious Activity During March Madness

A post-event study with IT managers around last year’s March Madness revealed that employees’ personal mobile devices were key players in following the tournament at work. Although there are official ways to securely follow the action, the likelihood that all employees will always use these is low.

Many employees who seek out free, alternative sources to watch the tournament may unknowingly turn to malicious websites and apps on their smartphones and tablets. Malware, phishing and other malicious attacks thrive during popular online events such as the World Cup and March Madness, and a slipup by one employee whose mobile device is connected to corporate data could wreak havoc on an entire organization.

Dangers of a Hard-Line Approach

One way organizations may look to combat the potential issues at hand is by completely banning and blocking anything related to March Madness in the office. While it seems straightforward, this hard-line approach is actually not recommended. Experts point out that it could have a dramatic effect on a company’s bottom line, with disengaged employees lowering the quality and quantity of work output and potentially increasing turnover.

Protecting the Enterprise From Malware Madness

With banishing March Madness from your organization off the table, there are two ways to avoid seeing your enterprise upset by mobile security threats: mobile threat management and user education.

If your organization supports BYOD, it is incredibly important to have an enterprise mobility management solution in place with mobile threat management (MTM) capabilities. MTM can stop mobile threats in your enterprise by detecting, blocking and managing mobile malware and addressing and remediating the concerns before they affect your organization. Having the ability to proactively manage mobile threats in real time is vital to help reduce the risk of sensitive corporate and personal data leaks from malicious March Madness-related cyberattacks.

User education is another effective defense that is absolutely vital at this juncture. IT can use this time to educate employees on the personal and corporate dangers of malware and phishing attacks targeting users seeking March Madness content on mobile devices and how to avoid them. Ignoring unfamiliar links, avoiding unofficial streams and downloading only official apps for the NCAA tournament will go a long way toward curtailing the myriad mobile security risks that could arise.

IT can also take this opportunity to remind employees of the organization’s established BYOD policy for personal mobile device use in the office and what they should do to stay compliant and continue to have secure access to the corporate resources they need to get their jobs done.

A strong combination of MTM and user education can be the difference between watching the upsets take place on the court and experiencing them in the enterprise.

Image Source: Flickr

More from Risk Management

Increasingly Sophisticated Cyberattacks Target Healthcare

4 min read - It’s rare to see 100% agreement on a survey. But Porter Research found consensus from business leaders across the provider, payer and pharmaceutical/life sciences industries. Every single person agreed that “growing hacker sophistication” is the primary driver behind the increase in ransomware attacks. In response to the findings, the American Hospital Association told Porter Research, “Not only are cyber criminals more organized than they were in the past, but they are often more skilled and sophisticated.” Although not unanimous, the…

4 min read

Machine Learning Applications in the Cybersecurity Space

3 min read - Machine learning is one of the hottest areas in data science. This subset of artificial intelligence allows a system to learn from data and make accurate predictions, identify anomalies or make recommendations using different techniques. Machine learning techniques extract information from vast amounts of data and transform it into valuable business knowledge. While most industries use these techniques, they are especially prominent in the finance, marketing, healthcare, retail and cybersecurity sectors. Machine learning can also address new cyber threats. There…

3 min read

Now Social Engineering Attackers Have AI. Do You? 

4 min read - Everybody in tech is talking about ChatGPT, the AI-based chatbot from Open AI that writes convincing prose and usable code. The trouble is malicious cyber attackers can use generative AI tools like ChatGPT to craft convincing prose and usable code just like everybody else. How does this powerful new category of tools affect the ability of criminals to launch cyberattacks, including social engineering attacks? When Every Social Engineering Attack Uses Perfect English ChatGPT is a public tool based on a…

4 min read

How I Got Started: White Hat Hacker

3 min read - White hat hackers serve as a crucial line of cyber defense, working to identify and mitigate potential threats before malicious actors can exploit them. These ethical hackers harness their skills to assess the security of networks and systems, ultimately helping organizations bolster their digital defenses. But what drives someone to pursue a career as a white hat hacker, and how do you get started in leveraging so-called “evil” skills for the greater good?? In this exclusive Q&A, we spoke with…

3 min read