"Suddenly, everyone is working remotely, data is off premises and people have access to highly confidential data on devices, which aren't directly controlled by IT departments," said one expert.