Topic starter
11/07/2026 8:44 pm
TL;DR: Hybrid work weakens identity assurance and sender trust by pushing more communication through home networks, shared spaces, and mobile channels, according to GlobalSign. Messaging and access controls need tighter verification when work stretches across more places and devices.
Editorial analysis by NHI Mgmt Group, based on content published by GlobalSign: “El reto de un lugar de trabajo híbrido”.
Key questions
Q: Why do hybrid work models increase phishing risk?
A: Hybrid work pushes more communication into email, chat, and messaging tools, where impersonation is easy and verification is often weak.
Q: What are the signs that hybrid work controls are not keeping up?
A: Common signs include password reuse across tools, inconsistent device patching, broad access after login, and training that users do not understand or follow.
A: IT teams should build a centralized policy framework that covers acceptable use, data classification, device management, and incident reporting.
Practitioner guidance
- Tighten remote authentication assurance Require multifactor authentication for all hybrid access paths and review whether certificate-backed authentication is appropriate for higher-risk users and services.
- Harden email and messaging trust controls Combine anti-phishing protections, sender verification, and user awareness measures so routine collaboration channels are less likely to be abused.
- Review device and network trust assumptions Treat home WiFi, shared spaces, and mobile channels as untrusted until the session is authenticated and the device posture is acceptable.
Bottom line: Hybrid work weakens the office perimeter and shifts security pressure to identity assurance, messaging trust, and remote access controls.
Glossary terms: Hybrid Work Security, Identity Assurance, Sender Assurance, Certificate-Backed Trust
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 60 minutes ago by NHI Mgmt Group
11/07/2026 9:10 pm
Hybrid work has turned identity assurance into the main control plane for workplace security. Once users connect from homes, shared spaces, and mobile channels, the office perimeter stops being the primary defence. That shifts governance pressure onto authentication strength, device confidence, and session-level trust decisions. Practitioners should treat access verification as the first line of control in hybrid operating models.
A question worth separating out:
Q: Should organisations treat encrypted traffic as enough protection for hybrid work?
A: No. Encryption protects confidentiality in transit, but it does not prove who is sending the message or whether a login request is legitimate. Hybrid work needs both secure transport and identity assurance, because attackers often succeed by abusing trust rather than breaking encryption itself.
👉 Read our full editorial: Hybrid work security gaps are outpacing workplace flexibility