Remote and hybrid work is here to stay, but home networks were built for streaming and homework, not client data. The good news: a handful of settings and habits cover most of the risk. Use this checklist for every employee who works from home, even part-time.
The device
- Use a company-managed computer for work, not a shared family PC
- Turn on full-disk encryption (BitLocker on Windows, FileVault on Mac)
- Keep automatic updates on for the operating system and browsers
- Make sure endpoint protection is installed and reporting in
- Lock the screen automatically after a few minutes of inactivity
The home network
- Change the router’s default admin password
- Use WPA3 or WPA2 encryption with a strong Wi-Fi password
- Update router firmware, or replace routers that no longer get updates
- Put smart TVs, cameras, and gaming consoles on a guest network
On the road? Skip public Wi-Fi for work. A phone hotspot is almost always the safer choice.
Accounts and access
- Require multi-factor authentication on email and every business app
- Connect to company systems through approved secure access, not ad hoc workarounds
- Save files to OneDrive or SharePoint instead of the desktop, so they’re backed up and recoverable
Habits that matter
- Keep work and personal separate. Family members shouldn’t use the work laptop, and work files shouldn’t live on personal devices.
- Mind the room. Position screens away from windows, and lock away printed documents with client information.
- Report problems fast. A lost laptop or suspicious email reported in minutes is a small problem. Reported in days, it can be a breach.
Most of these settings can be enforced centrally by your IT provider, so remote employees don’t have to remember them.