Remote Work Security

Working from Home Is Not Working from a Fortress

When you work from the office, you benefit from:

• Managed network infrastructure
• Physical security (badges, guards, CCTV)
• IT support on-site
• Corporate firewalls and monitoring

When you work from home, you're on your own network, in your own space, often with family members around. Different environment, different risks.

Your Home Network

Your router is your perimeter.

Most home routers are:

• Set up once and forgotten
• Running outdated firmware
• Using default or weak passwords
• Shared with everyone in the household

Router Security Checklist

✓ Change the admin password — The one you use to access router settings (often "admin/admin" by default)

✓ Update firmware — Manufacturers release security patches. Check quarterly.

✓ Use WPA3 or WPA2 — Not WEP, not "Open"

✓ Strong WiFi password — Not your address, phone number, or pet's name

✓ Check connected devices — Remove anything you don't recognise

Real Example: Home Router Attacks (2023)

Researchers found that millions of home routers worldwide were compromised due to unpatched vulnerabilities.

What attackers could do:

• Monitor all internet traffic
• Redirect to fake websites
• Steal credentials
• Launch attacks on other networks

Most victims had no idea they were compromised.

The fix: Update firmware, change default passwords — takes 10 minutes.

Separating Work and Personal

Why Separation Matters

When work and personal activities mix on the same devices and networks:

• Personal malware can spread to work data
• Work credentials can be exposed through personal sites
• Family members might accidentally access sensitive information
• Personal device compromise = work compromise

Best Practices

Network separation (if technically possible):

• Guest network for IoT devices (smart TVs, speakers)
• Main network for work devices
• Some routers allow easy network segmentation

Device separation:

• Work laptop for work only
• Personal devices for personal use
• Don't "just quickly check" personal email on work laptop

Account separation:

• Work browser profile for work
• Personal browser profile for personal
• Don't mix bookmarks and saved passwords

Family Considerations

The "quick favour" trap:

"Can I just check something on your laptop?" — Even well-meaning family members can accidentally:

• Close unsaved work
• Click phishing emails
• Download malware
• See confidential information

Solution: Work device = work only. No exceptions.

What Is a VPN and Why Does It Matter?

VPN = Virtual Private Network

Think of it as a secure, encrypted tunnel between your device and your company's network.

Without VPN

Your device → Your home network → Internet → Company systems
        ↑                    ↑
    Potentially         Could be
    compromised         intercepted

With VPN

Your device → [Encrypted tunnel] → Company VPN server → Company systems
                    ↑
            All traffic encrypted
            and routed securely

What VPN Protects

✓ Traffic encryption — Even if your home network is compromised, attackers can't read your data

✓ IP masking — Your real location is hidden

✓ Access to internal resources — Systems only available inside company network

✓ Protection on public WiFi — Essential when working from coffee shops, hotels, etc.

When to Use VPN

VPN Best Practices

Keep It Connected

❌ Don't disconnect to "make things faster" — The slight speed reduction is worth the security

❌ Don't use personal VPN services for work — They may log traffic, not company approved

✓ Connect before accessing work resources — Make it habit

✓ Reconnect after network changes — WiFi switch, waking from sleep

VPN Issues and What to Do

VPN won't connect:

1. Check your internet connection first
2. Try disconnecting and reconnecting
3. Restart VPN client
4. Contact IT if persistent

VPN is slow:

1. Some slowdown is normal (traffic is being encrypted and routed)
2. Try a different VPN server if available
3. Check your internet speed without VPN
4. Report persistent issues to IT

Split tunnelling (if your company allows it):

• Only work traffic goes through VPN
• Personal browsing goes direct
• Reduces load but reduces protection too
• Follow your company's policy

Secure Video Calls

The Background Problem

Your video background can reveal:

• Family members and children
• Whiteboards with sensitive information
• Documents on desks
• Computer screens with data
• Addresses and location clues

Real Example: UK MP Video Call (2020)

An MP appeared on BBC News from home. Behind them:

• Family photos were visible
• A whiteboard had meeting notes
• Books revealed political leanings

While not a security breach, it demonstrated how much information backgrounds can leak.

Video Call Best Practices

✓ Use virtual backgrounds — Hide your real environment

✓ Check what's visible before joining — Turn camera on, look at preview

✓ Position camera thoughtfully — Away from windows and sensitive materials

✓ Mute when not speaking — Prevents ambient noise and unintended comments

✓ Lock your door — Prevent unexpected walk-ins during sensitive calls

✓ Use headphones — Others can't hear meeting audio

Screen Sharing Safety

Before sharing your screen:

1. Close personal tabs and apps
2. Disable notifications (personal messages can pop up)
3. Close sensitive documents not relevant to the call
4. Share only the specific window needed — not entire desktop
5. Double-check what you're about to share

Building Secure Daily Routines

Security isn't about one big action — it's about consistent small habits.

Start of Day

✓ Connect VPN — Before accessing work systems

✓ Check for updates — Approve any pending security updates

✓ Review your calendar — Know what sensitive meetings are coming

✓ Secure your workspace — Family awake? Position screen appropriately

During the Day

✓ Lock screen when stepping away — Even at home

✓ Use headphones for calls — Prevents eavesdropping

✓ Be aware of your surroundings — Who can see/hear your work

✓ Don't print sensitive documents at home — Unless absolutely necessary

End of Day

✓ Log out of sensitive systems — Don't leave sessions open overnight

✓ Lock your devices — Physical security still matters

✓ Secure any printed materials — Lock away or shred

✓ Check VPN disconnected if not needed overnight — Or follow company policy

Common Remote Work Mistakes

Mistake 1: "I'll Just Use My Personal Device"

Why it happens: Work laptop is charging, personal laptop is right there.

The risk: Personal devices may have:

• Outdated software
• Malware from personal browsing
• Shared accounts with family
• No encryption
• No remote wipe capability

The rule: Work data stays on work devices.

Mistake 2: "The Kids Won't Touch It"

Why it happens: Convenience, boundaries seem unnecessary at home.

The risk: Children can accidentally:

• Delete important files
• Click malicious links
• Install games with malware
• See confidential information

The rule: Work devices are not for family use. Ever.

Mistake 3: "I'll Save This to My Personal Cloud"

Why it happens: Google Drive is easier than company SharePoint.

The risk: Personal cloud storage:

• Not managed by IT
• May have weak security settings
• Could sync to personal devices
• Outside company monitoring and compliance

The rule: Use company-approved storage only.

Mistake 4: "Public WiFi Is Fine If It Has a Password"

Why it happens: Password-protected feels secure.

The risk: Password-protected public WiFi is shared with everyone who has the password. The hotel lobby password is on a sign in reception. Everyone has it.

The rule: VPN on any network that isn't yours.

Reporting Issues When Remote

When to Contact IT

Technical issues:

• VPN problems
• Suspected malware
• Lost or stolen devices
• Suspicious emails or calls

How to contact:

• Know your IT helpdesk number/email before you need it
• Save it on your phone, not just your work laptop
• Have a backup contact method (what if email is down?)

Remote Incident Reporting

If you suspect a security incident while working remotely:

1. Disconnect from the network — WiFi off, ethernet unplugged
2. Contact IT immediately — Phone is often faster than email
3. Don't try to fix it yourself — You might make it worse
4. Document what happened — Times, what you clicked, what you noticed
5. Follow IT's instructions — They may need remote access

Emergency Contacts

Make sure you know (and have accessible when your laptop isn't working):

• IT helpdesk number
• Your manager's phone
• Security team contact
• HR if needed

Store these on your phone, not just your laptop.

The Remote Work Security Mindset

Working from home feels casual. That's both its benefit and its risk.

Remember:

• Your home network is not as secure as the office
• Your family can accidentally compromise your work
• Coffee shops and hotels are public spaces
• Security habits matter more when no one is watching

The mindset shift: You're not just "working from home." You're operating a remote extension of your company's network. Act accordingly.

You're now responsible for security that was previously handled for you. Rise to it.