Many of our colleagues are currently working from home. This naturally requires some flexibility, but above all, good preparation. Everyone has a computer and a WiFi network at home, but more is needed to work from home securely. Our Security Officer Timo is happy to share some tips to help you and your employees work securely from a distance.

1. Connect to the secure company network via a VPN connection

Normally, employees work from a secure and trusted company network. This is, of course, not the case when working from home. In most cases, people use their own (WiFi) home network. It is important to at least secure this with a strong password and never use a free and/or public (WiFi) network. To properly manage access to your company network, it is wise to have employees connect to the company network using a VPN. This also encrypts the traffic to and from the company network; much safer.

2. Use strong passwords and multi-factor authentication as much as possible

The use of strong passwords, and especially multi-factor authentication, is more important than ever when working from home. Therefore, implement a clear password policy and ensure employees adhere to it. To prevent hackers from easily accessing systems if weak or leaked passwords are used, it is highly recommended to use multi-factor authentication everywhere possible. This way, hackers no longer have enough with just a password to gain access. Logging in will then also require a temporary, randomly generated code or key, which someone, for instance, receives on their phone.

3. Remind employees to be extra vigilant for phishing and how to report it

This Corona period is a prime opportunity for hackers to exploit phishing emails. We see this reflected in the large number of phishing emails being sent. Employees are generally less alert at home than usual and may not be as aware of what is happening at the office. This increases the chance that someone might fall for such a phishing email and click a link or log in. It is therefore important to make employees aware of this and clearly indicate where they can report such phishing emails, or suspicions thereof.

4. Ensure all software is up to date

Whether business or personal equipment is being used (Bring-Your-Own-Device), it is extremely important that software on this equipment is kept up to date. Vulnerabilities are discovered daily in widely used software, which can allow hackers to access the computer and, consequently, your company network. Applying updates as quickly as possible can prevent this. So, ask your employees to always keep their equipment up to date at home as well.

5. Prevent capacity issues with the company network

During this period, possibly (many) more people are working from home, all needing to connect to your company network. This can lead to capacity issues and delays. Therefore, ensure that your company network has sufficient bandwidth so that everyone has a fast and stable connection. Do you use certain web applications within your company? Then host these with a reliable hosting provider who ensures they run securely, quickly, and stably 24/7. Think this all through so you can make working from home as efficient as possible for everyone.

6. Keep data within the systems provided

While working from home, employees might miss certain facilities available at the office, such as for storing or sharing information. However, it is extremely important to keep (sensitive) data within your organization’s own facilities. So do not store business data or documents “temporarily” elsewhere in the cloud or in your private email to get your work done. Use the resources provided by your organization. Also, emphasize to employees not to look for quick/temporary workarounds themselves (which may be potentially unsafe). Have them report such situations so a safe solution can be found and ensure that one is actually provided.

7. At home, also follow your organization’s guidelines regarding information security

Although you are, of course, in a completely different environment at home than at the office, it is important to follow all information security rules at home as well. Think, for example, about the use of USB sticks, installing certain software, and locking your screen when you walk away from your computer. If you adhere to the guidelines, everyone can continue to work from home safely.