Here's how you can safeguard confidential information while working remotely.

As soon as "remote end devices" = road warrior setups are more than occasionally used, an automatic VPN solution (classical VPN or automatic redirection to a cloud firewall / SASE via TLS) is strongly recommended.

Safeguarding confidential information when working remotely is one of the main reasons organizations wanted people to return to the office after COVID-19. As always, the only safe IT connection is a closed one. However, this type of connection is still at risk because other people may have access to your computer. In short, nobody should use your work computer at any time, and employees should never walk away from their computer while it isn't guarded by a password.

You safeguard information remotely just as you do when you're not working remote. Remote is in reference to your physical location; however, most everything is nowadays stored digitally and in the cloud.

?? Securing your network is vital when working remotely to protect sensitive data. Avoid public Wi-Fi, which is prone to cyber-attacks, and instead use a Virtual Private Network (VPN) to encrypt your connection and hide your IP address, creating a secure data tunnel. Also, ensure your home Wi-Fi is protected with a robust password and updated encryption standards. These measures significantly reduce the risk of unauthorized data access. Sources: NordVPN: What is a VPN? Kaspersky: How to Secure Your Home Wi-Fi Network

I believe that remote work has become increasingly common, making WiFi security a top priority to protect sensitive information and maintain productivity. One of the first steps is to use a strong, complex password for your WiFi network, incorporating a mix of letters, numbers, and special characters. Additionally, enabling WPA3 encryption, if supported by your router, offers the highest level of security; if not, WPA2 is a suitable alternative, while outdated protocols like WEP should be avoided. Keeping your router’s firmware updated is essential, as manufacturers regularly release updates to patch vulnerabilities and improve security features. Using a Virtual Private Network is also highly recommended. A VPN encrypts your internet.

At present, the minimum password length should be set to 16 characters, assuming reasonable complexity = uppercase, lowercase, nubers. I prefer longer passwords (perhaps with 24 characters minimum length) over complex passwords with special characters that can be difficult to handle especially when different keyboard layouts are in place.

We often discuss within the GRC team that in the era of remote work, the importance of using a password manager cannot be overstated. With remote work, employees often access numerous online services and platforms, each requiring unique and strong passwords. A password manager simplifies this process by securely storing and managing these passwords, ensuring that employees can easily use complex, unique passwords for each account without having to remember them all.

Important aspect of access management is consistent review of the same. One way to manage access control related evidence is using tools like Impero or similar platform. It allows auditors to independently review the evidence and then go through the trail of control executor and reviewer activities.

MFA can be set up seamlessly (= transparent from an user's perspective) by using the Client certificate as second factor. This implies of course a full featured PKI including an offline root CA and a separate issueing CAs with a publicly accessible CRL for Clients.

During COVID, one of the challenges we faced was asset management in the context of remote work. For organizations supporting remote work, effective spare asset management is crucial to ensure operational continuity and efficiency. Spare asset management involves tracking and managing extra equipment and resources that can be quickly deployed when needed. This becomes particularly important in a remote work environment, where employees rely heavily on technology to perform their tasks.