In the era of Coronavirus (Covid), the work from home model has become more important to businesses and from the looks of it, it’s here to stay even if it means a hybrid model.  But there are two key points you need to consider making this process secure and redundant.

  1. Backup
  2. Secure Access

Backup

Any essential work file must be saved to a designated location, whether in the cloud or through a Virtual Private Network (VPN) access.  If the users are saving to their desktop or somewhere on the local hard drive due to ease of access, then a local backup must be established.  Many of the cloud file providers like OneDrive, Egnyte, Dropbox, and Box now offer tools to make this process easier by selecting key locations for synchronization to the cloud. 

Secure Access

There are many different factors you need to consider.

  1. Is the user protected with a comprehensive antivirus & Malware protection?
  2. Is this protection kept up to date and monitored?
  3. Is the home Wi-Fi secured with a strong password, making sure no open Wi-Fi network is available at the same location?
  4. Are the users all using strong passwords, specifically for non 2FA sites
  5. Are you using a password manager to simplify strong and secure password management?
  6. Are the computers/devices kept up to date on security patching and monitored?
  7. Is all the software, including the browsers updated?
  8. Is all essential web portal sites setup for two factor authentication?
  9. Are the computer hard drives encrypted and encryption keys protected elsewhere to protect against theft?
  10. Do you have remote wiping technology to clean up after a potential theft?
  11. Is the VPN Software updated in a timely manner?
  12. Are users trained in Phishing scams?
  13. Do your users have a secure method of sharing important documents in a secure/encrypted way?
  14. Is there a standard setup procedure for employee computer setup that includes all the security setup?
  15. Have the user’s installation rights been removed?
  16. Are you using a web filtering technology to protect the users from malicious sites?
  17. Do you have a Work from Home Security Policy, which includes the above list?