Forced labor is work performed under coercion, threat, or deception, where a person cannot freely refuse, leave, or control how they are paid and monitored. In cyber security, this matters because coerced workers may be used as front-line operators, contract staff, or remote contractors inside legitimate business processes. That can hide who actually controls an account, device, or workspace.
Defenders should treat forced labor as both a human-rights issue and a security risk. It can create insider-risk conditions, identity mismatches, and weak accountability in hiring, access approval, and payroll workflows. Attackers and evasive operators may exploit these gaps to pass identity checks, obtain remote access, or route payments through third parties. Strong identity verification, location and payment validation, and careful vendor oversight help reduce the chance that coercive labor arrangements become a blind spot in security controls.