How To Secure Your Business When Remote Working • Blisstech Solutions

The global COVID-19 crisis means that more people are remote working than ever before.  Businesses rushed to enable their employees to work from anywhere very quickly, which may include access to sensitive company data.  In the rush to stay operational during the crisis, it can be easy to overlook security in favour of convenience.  However, remote working can be done securely, and here are some key pointers to help you.

Secure Windows Remote Desktop

A quick way of enabling remote working is to enable Windows Remote Desktop (RDP) and open port 3389 on the firewall.  BAD IDEA!  RDP has had a lot of security vulnerabilities associated with it and should not be exposed directly to the internet.  Use Remote Desktop Gateway or a VPN to protect the systems you want to provide access to while remote working.

Deploy a VPN

A VPN enables employees to make a secure connection into your internal network from anywhere.

The connection is encrypted between the remote computer and network so it can safely be used without fear of snooping.  For the employee,  it can appear to them as if they were connected directly to the internal business network.  You should consider adding multi-factor authentication to ensure that, if a user’s password is compromised, the connection is still protected.

Use Cloud-Based Systems

Using Software as a Service (SaaS) such as Microsoft 365, or other cloud-based systems, gives your business a huge amount of flexibility, and allows your employees to work anywhere.  SaaS solutions are based on centralised systems in the cloud, and because of this they also can offer better security when they are configured correctly, especially when combined with multi-factor authentication.  As company data and systems are available securely in the cloud, there is no need for users to take external copies of data or use shadow IT so they can work remotely.  All of this means you have control of where your data is and who can access it, so it is far less likely to be compromised.

Enable Multi-Factor Authentication

Multi-Factor Authentication (MFA, but also known as 2FA) adds an additional ‘factor’ to the login, in addition to the password.  This ‘factor’ is usually something that you have like a mobile phone, email address, or security token that provides and an extra code needed to log in.  You may be familiar with using this as it has become very popular recently, being used by banks, the UK Government website and many more.  You should consider adding MFA to any critical system exposed to the internet.   This includes, but is not limited to, VPN, email, CRM, accounting system and any other cloud-based system used to run your business.

Centrally Enforce Security Policies

Remote working can be bad for IT security.  When your users are not protected by your companies internal systems like firewalls, and are in the relaxed environment of their home they drop their guard.  Problems like using business issued systems for personal and family use can expose your business to additional threats.  You can use solutions from Sophos and Microsoft to centrally enforce your security policies to prevent this.

Update Your Systems

Having endpoint software up to date is key to ensuring that they are protected from known vulnerabilities and malware.  Having a strategy and systems in place to check and enforce anti-virus, Windows and other software updates means you know that your users’ endpoints are up-to-date and protected as much as possible.

Educate Your Users

A good remote working setup

Threats from phishing and other scams are at an all-time high, with hackers trying to take advantage of people’s fears about the coronavirus.  Employees need to be educated now more than ever.  Protection for the human layer comes down to training and education. Following the training, you need to keep users on their toes and there are services available that can automate this.

Have Remote Working Policies In Place

Clearly articulate what behaviour is expected, and not expected, to your remote workers.  If a user does something that puts your business at risk, you can’t reprimand them if you didn’t communicate policy.  You may also be able to enforce some of this policy (updates, web browsing, etc) using technology, but even if you can’t enforce it, you should explain what is, and what is not, allowed.

We can help

If you need any assistance with remote working more securely, or remote working full stop, please contact us on 01299 382 321 or get in touch through the website.

More Content

Businesses are taking too long to fix vulnerabilities

Businesses are taking too long to fix vulnerabilities

If you knew your systems were at risk of attack, you’d jump in and get things locked down fast – right? Actually… many businesses take too long to fix vulnerabilities. Here’s why that’s a problem.

Are you using Teams to share sensitive data?

Microsoft Teams has fast become one of THE most useful business tools for the way we work today. No matter where your people work from, they can communicate and collaborate quickly and reliably. But this remote way of working can also open the door to some MAJOR security issues. New research shows that nearly HALF of employees frequently share confidential …

Before you replace your slow PCs…

Before you replace your slow PCs…

Windows PCs running slowly? It doesn’t necessarily mean it’s time to replace them. There are some other ways you can give things a boost. We’ll tell you how.

How to cheat (the Blue Screen of) Death

The Blue Screen of Death and how to avoid it

The dreaded Blue Screen of Death makes you panic about what happened, how much work you’ve lost, and how long it’ll take to fix. But a lot of the time it’s avoidable… We’ll tell you how.

Tech Tip: How to create a scheduling poll using Outlook

Welcome to a new Tuesday tech tip video where we will be exploring how to create a scheduling poll using Outlook. You know what it's like when you are trying to get everyone together for a meeting. Trying to find a time that suits everyone can be a real pain! There...

What is Proactive Monitoring and how can it protect your business?

How proactive monitoring will help your business weather any storm. You are the captain of your business's ship. You have a loyal and skilled team behind you. You are ready for any challenge! Or so you thought. Then, one day, without warning, a vast digital monster...
Metal work coming out of a metal apple

Do I need Antivirus on a Mac?

Broadly speaking there are two different types of desktop computer users; Windows users and Mac users (sorry Linux users but you are very much in the minority). Microsoft has included a free antivirus solution called Windows Defender for years because they realised...
Save time by accessing your Android phone’s files with File Explorer

Save time by accessing your Android phone’s files with File Explorer

A new feature in Windows 11 may make accessing files on your Android phone much quicker. We have all the details.

Why all businesses should adopt MFA now

Years ago, Multi-Factor Authentication (MFA) used to be called 2FA, or Two Factor Authentication.  This was made up of: Something you have, like a device that can generate a one-time password (OTP). Something you know, like a password. MFA has extended things meaning...
How future-ready is your business’s IT?

How future proof is your business’s IT?

Your business’s tech might be working well today, but is it ready for tomorrow? A new study has found more than 60% of business leaders aren’t confident about theirs. What about yours?

Share This
Contact
Love Lane
Cleobury Mortimer
Shropshire DY14 8PE

01299 382 321
[email protected]
Copyright © 2024 Blisstech Solution Ltd
Registered No: 08125391 VAT No : 307 5490 05