Here are some approaches that I've found useful in my experience: Asset inventory: having an inventory of all of your remote assets and tracking them for OS and software vulnerabilities helps manage risk. Least privilege: Following the principle of least and restricting privileges on endpoints is a good way to reduce the damage in the case of a compromise. Multilayered security: Using different tools to maintain security such as Firewalls, intrusion detection systems and endpoint detection and response tools increases your visibility and reduces the chances of an attack going unnoticed. Incident response procedure: updating the incident response procedure to be more suitable to a remote work environment helps you be more prepared.

Could ensure network safety by using VPNs, implementing MFA, regular software updates and security audits, endpoint protection, cybersecurity awareness sessions, control and monitor access to critical systems to prevent unauthorized access.

We can see that remote work has been revolting recently, hence security concerns are also escalating. From my personal knowledge the securities should be implemented by both the parties, the company and the employee. The company can follow secure SDLC and adapt ISO 27K which provides a framework to build systems with minimal exposure to vulnerabilities. Implement perimeter security like firewalls and IDS. And ensure that these perimeter security are diverse and layering has been followed so intrusion becomes challenging. Use VPNs to encrypt your private traffic in the public network. Conduct Vulnerability Assessments on the systems and patch all the vulnerabilities. Gain comprehensive knowledge of protecting digital assets.

Always educate employees to connect only through trysted network not public networks. Even if the trusted network like home or a friends is unstable, we can use: 1. VPN to create a secure tunnel between the employee device and the organisation resources and prevent sniffing of confidential data. 2. When authenticating users, always use MFA rather than 2FA for a secure layer of defence. 3. Always educate the users to update their OS and application softwares. These may seem a bit serious but yeah should be when security is mandate