Cybersecurity Best Practices for Working Remotely


Due to recent events in the world, there’s been a shift toward encouraging the workforce in certain areas to station themselves remotely. Unfortunately, threats still exist and cybercriminals could view this time as an opportunity to hack into your system.

It's vital to follow cybersecurity best practices when working remotely. This means that you need to educate your workforce to help them protect your company's data (and their own). A third of organizations have experienced a data loss or breach directly because of somebody working remotely.

There are a few steps you can take— doing these things can dramatically reduce the likelihood that your organization gets breached:

Require your employees use their work computers when they are at home

It’s imperative to reinforce that work computers are for work and personal devices are for personal activity, including email. A lot of people are tempted to do a quick email check or similar on their personal computer, which generally doesn't have the same antivirus and endpoint protection. Most people also tend to drift behind on software updates, meaning they don't have the latest patches installed.

Having a policy that work activity can only take place on approved devices mitigates this.

Roll out an MDM solution on all your company-owned computers

Enabling a mobile device management (MDM) solution on all company and approved devices will allow your organization to have better insight into your endpoint security.This is essential for tracking inventory and rolling out security policies in bulk if need be. Look at it this way— for most organizations the cost of lost data is far greater than the cost of a lost device. It’s for this reason incorporating an MDM solution to manage, monitor, and secure mobile devices for official use is vital.

So what happens if a device is lost or stolen? Make sure employees know that their devices can actually be remotely wiped if stolen so they can make sure to back up their data if not using cloud storage.

Implement hard drive encryption, firewalls and the latest OS updates

Hard drive encryption should be a must for most organizations at this point. When every hard drive within your workforce has encryption enabled, your security posture is stronger. A stolen laptop or mobile device is no longer a detrimental security threat. Due to encryption, the data simply won’t be accessible without another vector of attack like stolen credentials.

With the remote workforce taking their company-issued devices “out of office” and into the wild, these three things (hard drive encryption, firewalls, and latest OS updates) will ensure a strong foundation of security.

Encourage use of VPNs & avoiding public wifi when possible

Virtual private networks (VPNs) ensure a secure connection between a device and the company network. All remote employees should use a VPN. You should encourage your employees to remotely test their access to this so they are not left susceptible to unsecure networks.

Your IT department or MSP should choose and mandate a quality VPN— it’s important to keep in mind that not all VPNs are created equal.

The most important thing is to avoid public wifi. If you must use public or hotel wifi, you should use a VPN to protect and encrypt your connection. For extra measures, you should also warn your employees never to do sensitive personal activities such as banking over public wifi, in order to avoid their own identity theft.

Implement MFA/2FA on your email and other mission-critical apps

As a policy, multi-factor / two-factor authentication should always be used so it is harder for somebody to access the network from a stolen device. This is having a secondary form of authentication, usually a multi-digit code sent to a separate mobile device—for when employees sign in into apps with critical information.

By utilizing additional layers of authentication, even if your employee has their company device stolen, someone won’t be able to log into any important online accounts that store your sensitive company data.

Have employees change the password on their home wifi

Most people have their own wifi routers at home to provide internet access. However, the issue is that many people might have gained access over time when visiting and save the password to your home network. Before long, a lot of people know your home wifi password and people can connect to your router any time they pass by your apartment or home.

Once the password for access gets out in the world, it is very difficult to control who can access your home network. Therefore, you need to consider implementing some changes that protect you from intruders especially if you envision working remotely for a long period of time.

Ensure devices are not left unattended

One of the most common causes of data breaches is people getting hold of a device, even for a few moments. It might seem like common sense, but employees should never leave a computer, phone, or other device unattended especially if working remotely from a public place like a coffee shop, hotel, or airport.

It’s important to reinforce the importance of locking device screens and putting them to sleep in environments that might not be a worker’s typical work environment. While it’s easy to leave a computer unattended at our own offices (although not recommended!) we should be mindful of the fact that not everyone in society can be trusted.

Need help with securing your remote workforce?

Figuring out all your bases to cover is not an easy process to navigate, especially in times like these— and that’s why Electric is here to support your SMB. Electric can work closely with your organization to help you find the right solutions to make remote work easier and more secure.

Stay up to date

Subscribe to the blog to stay up to date with all the latest industry news and updates from Electric.