Secure remote work: VPN, devices and home networks

Working from home and on the road is normal now. How to give employees remote access without opening the company to attackers.

Remote work makes life easier for employees — and for attackers, if access is organized badly. Remote desktop open to the internet, personal laptops without protection and shared passwords are common causes of incidents.

Access

  • Use a VPN or zero-trust access with MFA. Never publish remote desktop (RDP) directly to the internet.
  • Give each employee access only to the systems they need.
  • Disable access immediately when someone leaves the company.

Devices

  • Company laptops with disk encryption, up-to-date systems and endpoint protection.
  • If personal devices are allowed, define minimum requirements and keep company data in managed applications.
  • Automatic screen lock and a policy for lost or stolen devices.

Home and public networks

  • Change the default password of the home router and update it.
  • Avoid public Wi-Fi without VPN; a mobile hotspot is usually safer.
  • Do not let family members use the work laptop.

Remote access should be as convenient as possible for employees — and as inconvenient as possible for everyone else.

Need help with this? Contact CySec for a free consultation.


All articles

Need help with this?

Our engineers can review your current setup and propose concrete improvements.