Secure Remote Work: Network and Devices

Remote and hybrid work have moved part of the company into our homes, cafés and trains. A home network is not a corporate network, a kitchen table is not a locked office, and a family laptop is not a managed workstation. In this lesson you will learn how to turn your home workspace into a safe one, and how to handle the difference between personal and professional devices.

Many of the habits you already have apply directly: updates, strong passwords, a secured router. What is new here is the mix of two worlds, family and work, under the same roof and sometimes on the same device.

What changes when you work from home

• The network is yours, not the company's. Nobody monitors it except you, and it is shared with family members, guests and connected objects.
• Physical security is looser: screens can be seen by visitors, family and neighbors, and documents are lying around.
• Devices may be mixed: the same laptop might be used for homework, games and work.
• Support is remote: when something goes wrong, IT cannot walk to your desk, which makes quick reporting even more important.
• Attackers know it: remote workers are targeted with fake IT support messages, fake video-conference invitations and fake document-sharing notifications.

Step 1: secure the home network

You saw the main steps in lesson 4.2. For a home workspace, make sure that:

1. The router's administrator password has been changed from the default one, and its software is up to date.
2. The Wi-Fi uses WPA3 or WPA2 with a long passphrase that you do not share widely.
3. Connected objects (TV, speakers, cameras, game consoles) are on a guest network if the router supports it, separate from the computer you work on.
4. Unnecessary features, such as remote administration, are switched off.
5. The firewall of your computer is on.

Step 2: use the company's secure access properly

Organizations usually provide specific tools for remote work. Use them as instructed:

• Company VPN or secure access service: as seen in lesson 4.2, this gives you an encrypted tunnel to internal resources. Connect to it when asked, and do not look for ways around it because it is slow; report the problem instead.
• Approved collaboration and file-sharing tools: use these rather than personal email or consumer cloud accounts for work files.
• Multi-factor authentication: keep it enabled on every work account, and never approve a request that you did not start.
• Company-provided password manager, if there is one.

Step 3: personal versus professional devices

The safest arrangement is to use a company-managed laptop for work, and personal devices for personal use. A managed device is updated, encrypted and monitored by the IT team, and can be locked or erased if lost. Mixing the two creates risks in both directions: company data on a family laptop, and personal malware on a work machine.

Some organizations allow BYOD ("bring your own device"), where employees use personal phones or laptops for work. If yours does, you will usually be asked to:

• Keep the system and applications up to date, with a screen lock and encryption.
• Install a management or "work profile" application, which separates work data from personal data on the device.
• Accept that the company can remove its own data, and sometimes lock the device, if it is lost.
• Avoid rooted or jailbroken devices and unofficial app sources.

Ask exactly what the company can see on a personal device. A good BYOD policy limits visibility to work data.

If you use a work laptop, a few extra rules apply:

• Do not let family members use it, even for "just a minute". A child clicking on a game ad is enough to expose your company.
• Do not install personal software without approval, and do not disable security tools.
• Do not connect personal USB drives or devices unless allowed.
• Lock the screen whenever you leave, even for a moment at home.

Step 4: protect the workspace and the conversation

• Screens and papers: position your screen so that visitors and windows cannot see it, and keep printed confidential documents locked away. Shred them rather than throwing them in the household bin.
• Calls and meetings: be aware that smart speakers and family members may hear sensitive discussions. Use headphones, and close the door if you can.
• Video conferencing: use the meeting links given by organizers, enable waiting rooms and passcodes if you host, check who is in the meeting before sharing confidential content, and be careful about what is visible behind you and on a shared screen.
• Voice assistants: consider switching off smart speakers in your workspace during confidential calls.
• Printing: avoid printing sensitive documents on a home printer when possible.

Step 5: working on the move

Cafés, trains, airports and hotels bring additional risks:

• Shoulder surfing: someone watching your screen or keyboard. Use a privacy screen filter for frequent travel, and choose a seat where nobody sits behind you.
• Public Wi-Fi: follow the rules from lesson 4.2, prefer your mobile hotspot and use the company VPN.
• Theft and loss: never leave a laptop or phone unattended, not even for a moment, and keep it with you rather than in a checked bag. Know what to do if one disappears, which we cover in lesson 6.4.
• Public charging ports: use your own charger and cable.
• Conversations: avoid discussing confidential matters in public places.

Common remote-work scams

• Fake IT support: a message or call claiming to be from the IT team and asking you to install software, give a code or "verify your account". Always verify through the official company channel.
• Fake meeting invitations or shared-document notifications leading to a login page. Check the sender and the address, or access the document from the application itself.
• Boss fraud: a message that appears to come from a manager or director asking for an urgent transfer or gift cards, often "while I am in a meeting". Verify through another channel.
• Fake recruiters and job offers that aim to collect your documents, or send "test" files that carry malware.

Keeping boundaries

Remote work blurs the border between personal and professional life, and also between personal and professional accounts. Keep separate browser profiles, avoid signing in to personal accounts on a work device, and do not store personal photos or documents there. It protects your privacy as much as the company's data, since a company-managed laptop may be inspected by IT.

Your turn

Exercise. Build a checklist for your home workspace of eight items, covering the network, the device, the physical space and the behavior. Then check each item, and note which ones need action.

See a solution

1. Router administrator password changed, firmware updated, strong Wi-Fi passphrase.
2. Guest network used for TV, speakers and visitors.
3. Work laptop updated, encrypted, locked automatically after a short delay.
4. Company VPN and multi-factor authentication working.
5. Work laptop used only by me, with no personal software or USB drives.
6. Screen not visible from windows or common areas; confidential papers locked away or shredded.
7. Headphones for calls; smart speaker muted during confidential discussions.
8. I know whom to call, and how, if the laptop is lost or I click something suspicious.

Add to your Security Notebook

Under "6. Security at work", paste your eight-item home workspace checklist, and mark the items to fix with a date. Add the rule for a lost device: "I call [contact] immediately."

Next, we examine who inside the company should be able to see what, and how you can help keep access under control.