Home, hybrid and remote working. Are your employees doing it safely?

Home, hybrid and remote working has many benefits for companies and employees alike, but it can carry risks which are additional to those encountered in the more controlled office environment. Wherever your people are working, cybersecurity should be part of your business culture.

We’ve compiled the following tips for businesses and charities with home, hybrid or other remote working. Similarly, those who run home-based micro or small businesses can take advantage of the advice.

There may be a tendency for employees to let their guard down when working away from the office. They should observe the same precautions wherever they’re working.
Emphasise the importance of protecting company-issued devices in case of loss, theft or damage. Ensure they can be locked down remotely. Devices should be kept out of harm’s way, for example, from family members, visitors and pets. And like any other devices, they should be protected with reputable internet security software and strong passcodes. More info: www.getsafeonline.org/business/article-category/hardware-and-devices
Consider whether it is safe and/or sensible to enable employees to use their own computers and mobile devices for work purposes. More info: www.getsafeonline.org/business/articles/byod
If employees need access to the company network, files and email, set them up a VPN (Virtual Private Network. First, read reviews for VPN security levels. Existing VPNs should be fully patched. More info: www.getsafeonline.org/personal/articles/virtual-private-networks-vpns
Home workers’ broadband routers should be secured and the router name made unidentifiable to avoid unwanted access. More info: www.getsafeonline.org/personal/articles/changing-wireless-passwords-ssids
When working out and about, such as in a café or hotel, Wi-Fi hotspots should be avoided to ensure work that’s confidential is kept that way. Instead, mobile data or a mobile broadband dongle should be used. More info: www.getsafeonline.org/business/articles/mobile-and-home-access
If work conversations are confidential, make sure they can’t be picked up by smart speakers or cameras that may be in the same room. More info: www.getsafeonline.org/personal/blog-item/how-to-safeguard-iot-gadgets-at-home
Set strong passwords for new accounts or remote access and impose rules about password usage, such as not sharing, using a password manager and having unique passwords for each account. More info: www.getsafeonline.org/business/articles/password-protocol-and-control
Ensure that cloud-based collaborative services such as video calls/meetings/presentations and file sharing are secured with strong, unique passwords and 2FA (Two-Factor Authentication). More info: www.getsafeonline.org/business/articles/tele-and-video-conferencing
Ensure all employees (whether they work remotely or not) receive regular, up-to-date education and training about cybersecurity, including safe online behaviours and information about current threats. More info: www.getsafeonline.org/business/articles/staff-training
Maintain your normal checks and controls, including for data breaches. It may also be worth notifying your insurance provider that staff are home working. More info: www.getsafeonline.org/business/article-category/rules-guidelines-and-procedures
Report actual or attempted fraud immediately to Action Fraud at www.actionfraud.police.uk or by calling 0300 123 2040. If you’re in Scotland, call Police Scotland on 101. Report data breaches which may compromise individuals’ rights and freedoms to the ICO (Information Commissioner’s Office) at www.ico.org.uk