Practical security habits for employees working from home or in public spaces that significantly reduce your business's risk.
Remote work has become the norm for many businesses, but it introduces security risks that don't exist in a controlled office environment. These practices, when followed consistently, dramatically reduce the likelihood of a successful attack on your remote workforce.
Essential Practices
- Use the VPN: Always connect to the BRANDED IAM VPN before accessing any business systems, especially on networks you don't control (coffee shops, airports, hotels). See the article How to Connect to VPN.
- Lock your screen: Use Windows+L (Windows) or Control+Command+Q (Mac) to lock your screen whenever you step away, even at home.
- Don't use personal accounts for business: Keep business email, files, and communication in your Microsoft 365 account — not personal Gmail, iCloud, or Dropbox.
- Keep your home router updated: Log into your home router's admin panel and check for firmware updates quarterly. Outdated router firmware is a common entry point for attackers.
- Enable MFA on everything: Every business account should require MFA. If a service you use for work doesn't support MFA, flag it to your account manager.
Video Call Security
- Be aware of what's visible in your camera's background during video calls — avoid showing whiteboards with sensitive information or documents on your desk.
- Use waiting rooms for Microsoft Teams meetings with external participants.
- Never share your screen without checking what windows are open first.
When Something Seems Wrong
If your computer starts behaving unexpectedly — running slower, showing unfamiliar programs, or displaying pop-ups asking for permission — disconnect from the internet and call (925) 365-9811. Don't try to diagnose it yourself. Isolation is the priority.