Remote work (working from home) is a way of working that allows employees to work outside of the traditional office environment. The basic idea is that work does not need to be done in a specific place to be successfully performed.
Remote work has become increasingly common in recent years, especially in the technology industry. However, since last year it has become the main way of working for most people around the world, due to the pandemic. The coronavirus has affected most countries and has created special conditions in all areas of everyday life.
See also: FBI on remote work: Don't work from hotels!
In an effort to limit the spread of the virus, most companies have asked their employees to work from home, so that there are not many people in the offices. In consultation with the company, employees may work remotely some or all days of the week.
This type of work has some advantages:
First, in most cases, there is greater flexibility. When employees are at home, they can steal some time and engage in other activities. Or they can use the time they would spend commuting to and from the office for other activities.
Additionally, people are in their own personal space, which automatically means there is greater comfort, while research has shown that those who work from home feel less stressed and are often more productive.
However, there are also some disadvantages , and the most significant ones are related to cybersecurity.
Working from home has given criminals new opportunities to attack. With more projects being carried out online and without the security provided in offices and corporate networks, employees and businesses are more vulnerable than ever.
Let's look at some of the main risks:
Unsecured networks
The first risk is related to unsecured networks. In general, networks are one of the most important topics in the field of cybersecurity. Employees may be working using public Wifi or Wifi with weak security levels. This means that they log into corporate accounts and gain access to sensitive data through unsecured networks.
Since employees often share confidential information, hackers and generally malicious users can spy on and steal this data.
Companies typically have firewalls to monitor network traffic and block malicious activity, but many people don't have a firewall to protect their home network.
Use of personal devices
Most employees who work outside the office use their personal devices. Unlike corporate devices, which usually have multiple layers of security, personal devices are vulnerable to viruses, malware, intrusions,
See also: Remote work: Many employees handle corporate data on their personal devices
Employees may not have taken care to protect their devices with proper antivirus software, and they may not be updating their systems. Anyone working in cybersecurity knows the importance of regular software updates. However, on personal devices, it is difficult to monitor whether or not the latest software versions are installed.
Another problem with personal devices is that users also use them for personal use. That is, they may use them to make online purchases, check their personal emails, watch movies, and more.
Also, the same devices may be used by other family members. This means that someone could accidentally delete important files or, worse, infect the device with a virus by visiting unsafe sites and performing various activities.
Finally, employees who leave the company can keep confidential information on their devices and sell or share it with third parties. Especially in the case of dismissal, this is very likely because the former employee may want to take revenge on the employer.
Several employers have provided their employees with company-issued devices, offering greater security to them and the company itself, but surveys have shown that in both the United States and Europe, many employees still use their own devices.
Exchange of important data via the Internet
Then, another problem with remote work is the exchange of data over the Internet. In an office, employees usually use secure communication infrastructures to exchange important information or may speak to each other in person.
See also: Remote work: Most people don't report technical issues to their company's IT team
But when working from home, they are forced to use the internet to share information. This can be very dangerous, especially if employees use public networks, which can be easily hacked.
Natural threats
Finally, beyond digital threats, there are also physical threats that can put a company's data at risk.
For example, an employee may be in a public place and talking loudly about work-related matters. They may also have their screen exposed and a stranger spying on their activities.
These risks indicate that steps need to be taken to enhance security.
By following some basic security practices, organizations can protect their employees from threats while also protecting the companies themselves.
Let's look at some of these practices:
Specific policy for remote work
First, it is important to have a specific work-from-home policythat outlines all the guidelines that employees need to follow. For example, it will provide instructions on how they can access systems, what information they can and cannot share, and all the other details.
Implementing an appropriate policy can significantly reduce cybersecurity problems.
When remote workers know exactly what the guidelines are, they are more likely to implement them and ensure they meet the safety standards set for remote work.
Check router settings
Once these things have been clarified, special attention must be paid to the network, which as we said is one of the biggest risks. Employees must connect to a specific protected network.
Of course, they should avoid public Wifi, which anyone can access.
However, caution is also needed on the home network. Whether they work from home or not, users should change the default router password and check the DNS settings.
Provision of corporate devices
Then, providing company-owned devicesfor work-only use could also reduce potential security issues. However, if personal devices are used, it is important to ensure that antivirus software is used and that it is updated frequently. This way, cybercriminals will not be able to exploit known vulnerabilities to gain access to and infect devices.
Encrypted devices and applications
Using encrypted communication tools is extremely important for employee and business security. Remote workers should always use encrypted communication devices and apps.
The company should recommend specific tools that offer secure communications.
Using VPN
In the context of secure communication and device use, the use of a VPN is also included. A VPN enables remote users to access a central organizational network.
It typically requires users to authenticate, and secures data with encryption technologies to prevent the dissemination of private information to unauthorized users.
Backup
Another useful security practice, applicable to all workers, remote and not, is creating backups. Anything can happen to a company's data, especially when someone is working remotely.
A cybercriminal could breach the network and steal important data, or the device could be lost or stolen. Data theft is a major problem, but things can be made a little better if the employee has taken care to have backups.
Employee training
In many cases, various attacks and breaches are due to human error. Therefore, employee training is essential so that they are able to recognize various threats, such as phishing , which is perhaps the most common threat to remote workers.
Useful information: Phishing emails: How to recognize them and how to protect yourself?
As part of the training, it is important to provide various tips on protecting devices and networks. It may even be necessary to require users to regularly update their systems, implement two-factor authentication on their accounts, use strong and unique passwords that they do not share with other users, and more.
Physical security
While some things are taken for granted, companies should also provide guidance on physical security, as this can be directly linked to cybersecurity. These guidelines should remind employees that devices should never be left unattended, that working in public spaces should be avoided, and that confidential data should be transferred with caution.
Such small actions make a big difference when it comes to cybersecurity.
Working from home may continue to be mandatory for many employees, so it must be done properly and with the same safety precautions as when people are in their workplace.
