Secure remote and hybrid working: 7 agreements that make the difference
Remote work widens your attack surface. With these seven practical agreements you keep hybrid working secure without hindering your people.
By Limburg Cyber Group
Hybrid working is the new normal for many businesses. Convenient and sought-after, but it also means company data leaves the building: onto home networks, personal devices, and into cafés. That increases your risk. With a handful of sober agreements you keep it both secure and workable.
The 7 agreements
- Work on managed devices. A laptop your business manages (with updates, encryption, and a virus scanner) is safer than a random personal computer. If that is not possible, make clear agreements about personal use.
- Encrypt the hard drive. If a laptop is lost or stolen, the data is easily readable without encryption. Disk encryption (BitLocker, FileVault) is often already available.
- MFA on anything reachable from outside. Away from the office, this is your most important lock. See multi-factor authentication.
- Use secure connections. A VPN or a well-secured cloud service prevents eavesdropping on public wifi.
- Separate work and personal. No company files in personal clouds or personal mail, and vice versa. That prevents data breaches and hassle.
- Lock your screen. At home and on the go too: an unattended, open screen is a risk. Automatic locking after a few minutes helps.
- Watch extra for phishing. At home the social check is gone and people are more easily distracted, exactly what attackers aim for. See spotting phishing.
Make it easy, not hard
Security that gets in the way too much gets bypassed. So make sure the secure way is also the easy way: good tools, clear explanation, and help that is reachable. Involve your people in the agreements, and they will stick to them too.
Write it down
These agreements belong in your IT policy, so they apply to everyone and do not depend on who happens to be paying attention. New employees then know immediately where they stand.
Help setting it up?
We help you set up hybrid working securely, in line with how your team works. See our cybersecurity service or book a conversation.
Read more
Security awareness: from a one-off training to a safe culture
Your employees are your biggest risk and your best defence. Here is how to build genuine security awareness that sticks, beyond a mandatory course.
Updates and patch management: the dullest measure that stops the most attacks
Outdated software is the most common way in for attackers. Why patching promptly matters so much, and how to approach it simply and in a structured way.
Securing your office network and wifi: the basics that are often forgotten
Your network is the front door of your business. Practical steps to secure your wifi, router, and guest network, without becoming a network administrator.