Topic starter
11/07/2026 8:44 pm
TL;DR: Hybrid work expands access from home networks, shared spaces, and mobile channels, increasing phishing exposure, encrypted traffic demands, and data-handling complexity, according to GlobalSign. The security problem is less about location and more about weakening trust, identity verification, and communication controls across distributed work environments.
Editorial analysis by NHI Mgmt Group, based on content published by GlobalSign: “El reto de un lugar de trabajo híbrido”.
Key questions
A: IT teams should build a centralized policy framework that covers acceptable use, data classification, device management, and incident reporting.
Q: Why do hybrid work models increase phishing risk?
A: Hybrid work pushes more communication into email, chat, and messaging tools, where impersonation is easy and verification is often weak.
Q: What are the signs that hybrid work controls are not keeping up?
A: Common signs include password reuse across tools, inconsistent device patching, broad access after login, and training that users do not understand or follow.
Practitioner guidance
- Tighten remote authentication assurance Require multifactor authentication for all hybrid access paths and review whether certificate-backed authentication is appropriate for higher-risk users and services.
- Harden email and messaging trust controls Combine anti-phishing protections, sender verification, and user awareness measures so routine collaboration channels are less likely to be abused.
- Review device and network trust assumptions Treat home WiFi, shared spaces, and mobile channels as untrusted until the session is authenticated and the device posture is acceptable.
Bottom line: Hybrid work weakens the office perimeter and shifts security pressure to identity assurance, messaging trust, and remote access controls.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/07/2026 9:10 pm
Hybrid work has turned identity assurance into the main control plane for workplace security. Once users connect from homes, shared spaces, and mobile channels, the office perimeter stops being the primary defence. That shifts governance pressure onto authentication strength, device confidence, and session-level trust decisions. Practitioners should treat access verification as the first line of control in hybrid operating models.
A question worth separating out:
Q: Should organisations treat encrypted traffic as enough protection for hybrid work?
A: No. Encryption protects confidentiality in transit, but it does not prove who is sending the message or whether a login request is legitimate. Hybrid work needs both secure transport and identity assurance, because attackers often succeed by abusing trust rather than breaking encryption itself.
👉 Read our full editorial: Hybrid work security gaps are outpacing workplace flexibility