Secure remote and hybrid working: 7 agreements that make the difference
Remote work widens your attack surface. With these seven practical agreements you keep hybrid working secure without hindering your people.
By Limburg Cyber Group
Hybrid working is the new normal for many businesses. Convenient and sought-after, but it also means company data leaves the building: onto home networks, personal devices, and into cafés. That increases your risk. With a handful of sober agreements you keep it both secure and workable.
The 7 agreements
- Work on managed devices. A laptop your business manages (with updates, encryption, and a virus scanner) is safer than a random personal computer. If that is not possible, make clear agreements about personal use.
- Encrypt the hard drive. If a laptop is lost or stolen, the data is easily readable without encryption. Disk encryption (BitLocker, FileVault) is often already available.
- MFA on anything reachable from outside. Away from the office, this is your most important lock. See multi-factor authentication.
- Use secure connections. A VPN or a well-secured cloud service prevents eavesdropping on public wifi.
- Separate work and personal. No company files in personal clouds or personal mail, and vice versa. That prevents data breaches and hassle.
- Lock your screen. At home and on the go too: an unattended, open screen is a risk. Automatic locking after a few minutes helps.
- Watch extra for phishing. At home the social check is gone and people are more easily distracted, exactly what attackers aim for. See spotting phishing.
Make it easy, not hard
Security that gets in the way too much gets bypassed. So make sure the secure way is also the easy way: good tools, clear explanation, and help that is reachable. Involve your people in the agreements, and they will stick to them too.
Write it down
These agreements belong in your IT policy, so they apply to everyone and do not depend on who happens to be paying attention. New employees then know immediately where they stand.
Help setting it up?
We help you set up hybrid working securely, in line with how your team works. See our cybersecurity service or book a conversation.
Read more
Passkeys for your business: logging in without a password, and hard to phish
Passkeys replace the password with a key on your device that will not work on a fake site. What they are, what to watch for and how to start sensibly.
Securing your company website: the maintenance nobody gets round to
Many small business websites run for years without maintenance. What to sort out: updates, admin accounts, tested backups, HTTPS and access to your domain.
QR code phishing: how quishing works and how your team can spot it
Scammers hide links in QR codes: in emails, PDFs, letters and on stickers. Why it works, how to recognise it, and what to tell your employees about it.