Train yourself and your employees on best practices for device security. Regularly remind emplyees to be vigilant and aware of potential threats, these include:

Physical attacks:

A bad actor may try to gain physical access to a device by stealing it or by using a technique called "evil maid" attack, where they tamper with a device while it is unattended in a public place such as a hotel room.

Side-channel attacks:

A bad actor may attempt to extract sensitive information from a device by measuring its power consumption, electromagnetic emissions or other physical characteristics.

Remote access attacks:

A bad actor may try to gain unauthorized access to a device by exploiting vulnerabilities in remote access software or by using malware to establish a backdoor into the device.

Supply-chain attacks:

A bad actor may try to compromise a device by tampering with it before it is delivered to the end user, for example by installing malware on the device during manufacturing.

Password cracking:

A bad actor may try to crack the password of an account or device by using a brute-force attack, a dictionary attack or by exploiting known vulnerabilities in the password-hashing algorithm.

Social engineering attacks:

A bad actor may try to trick users into providing sensitive information or login credentials by disguising themselves as a trusted entity, such as a bank or a government agency.

Quantum computing attacks:

A bad actor may try to use the power of quantum computing to crack encryption keys and gain access to sensitive information.

AI-based attacks:

A bad actor may try to use Artificial intelligence to identify vulnerabilities on the system and exploit them.