Securing Your Remote Workforce in Time of Emergency
Remote work has been gaining popularity across businesses of all sizes. It provides flexibility to colleagues and opens up companies to a workforce without limits to city, state, or even country. While the ability to work remote offers convenience for staff and a nice perk to provide prospects with, there are times when your staff will need to work remotely out of necessity. As flu season continues, many companies are encouraging colleagues to stay home if they feel sick to reduce the chances of the entire office falling ill. While flu season is top of mind, it’s not the only time when a workforce will need to work remotely. Natural disasters and other unexpected circumstances that would keep your staff away from the office can be handled with a remote workforce. Your technology solution provider (TSP) can not only help you work remotely but do it securely. You may have never had a remote workforce, but situations may require them to pivot in this direction, and you’ll need to support their new needs.
Security Awareness
Beyond the latest security tools and solutions, your most powerful defense against cyberthreats and building a secure remote workforce is the end users themselves. To get them to become more security-minded, you need to make your workforce aware of security through training or other means. Give them advice on what to be diligent about regarding attacks targeting remote workers, like phishing scams, fraudulent VPN messages, and more. A common tactic for bad actors is to capitalize on issues or events that trigger a gut response, like fear, in the reader. Email subject lines like ‘Corona News Flash’ or ‘X New Cases in (Insert City Here)’ stoke the flames of uneasiness and try to get a user to click without investigating if the email is even credible. There are easy ways for an end user to spot a phishing email, and security awareness will get them to take a few seconds to look before taking the next action on an email.
Access to Mission-Critical Applications and Documents
For workers to do their jobs while away from the office, they need access to applications and documents. If they are using a company-provided device, they may have most of what they need on their machine. If not, do they have access to documents in the cloud that are critical to their job function? Putting important documents and applications in the cloud will require secure policies for how to access them like audit trails, prohibited access to non-essential areas, permission-based roles, and more.
Securing Connections
With access to important documents and applications established, you need to ensure that their connections are secure. Installing a secure VPN is a direct link to client servers, but more security should be implemented. Two-factor authentication (2FA) is an extra layer of security that requires the end user to enter a second form of authentication, like a code sent to their phone, to gain access to servers or other applications. Enforcing better password protection practices are needed when more clients are working remotely. If circumstances all, many will go to a coffee shop or other public area, increasing the chances of their passwords to be stolen if they are not careful. Simple practices like not storing passwords to browsers and instead using a password vault can make it more difficult for unauthorized users to gain access to their networks.
Establish Communication Systems
The obvious drawback of remote work is the inability for clients to have face-to-face interactions with their colleagues. As technology has advanced, the once high barriers of long-distance communication and collaboration have been taken down. To keep teamwork alive and well for your clients and their remote workforce, setting up secure and reliable communication systems are crucial.
- Secure Access to Voice and Phone Systems Provide remote workers with explicit instructions on how to access these systems and provide access to support if it’s not working appropriately.
- Work vs. Personal Email Have your email server set up in the cloud to allow for business continuity so that your teams can communicate as if they were in the office. This way they won’t use their personal email to communicate with you or, worse, your clients.
- Implement Chat Functionality Chat programs are great ways for your teams to communicate in real time with colleagues wherever they may be. Pick a tool that can set up team spaces so they can segment certain colleague groups as needed.
- Remote Meetings The chat programs you implement will allow for video conferencing, so employees won’t miss a beat with meetings. Encourage them to implement a camera-on policy so they can have the same face-to-face touchpoints they would have if everyone were in the office. Send out meeting agendas ahead of time so everyone can prepare and stay focused.
Company-Owned or Bring Your Own Device (BYOD)
To maintain a secure remote work situation, you need to determine what devices your employees are going to use. Are you going to provide them with laptops and monitors? Do you need to issue company phones with secure lines of communication? If this is your plan, you need to figure out how to distribute the devices, so they can have them before or very soon after being out of the office. Another option is to allow them to use their own devices, including computers, tablets, and mobile devices. This comes with a lot of risks since you don’t know what is on the devices, how they use them, and other potential security problems. If you let them use their own devices, you need to implement policies around device usage on your networks, what documents they can and can’t download or store on their devices, and how to securely connect to the internet and your network.
Create a Policy for Remote Workers
Putting remote work policies in place are necessary steps to ensure your workers understand what they need to do to maintain a secure remote work environment. They also show they’re meeting state and federal compliance standards when handling sensitive client information when their colleagues are away from the office.
Accommodate Staff That Needs to Be On-Site
Remind your employees that unless being in the office or going to an offsite engagement is absolutely necessary, they should use technology to their advantage at all times. The communication systems mentioned earlier eliminate a lot of offsite meetings that could have been a video or phone call.
