Security Tips for Remote and Hybrid Workers

Security Tips for Remote and Hybrid Workers

The shift to remote and hybrid working has expanded the attack surface for organisations significantly. Home networks, personal devices, and public Wi-Fi introduce risks that the controlled office environment manages by default.

Securing Your Home Network

• Change the default admin password on your router immediately.
• Use WPA3 encryption if your router supports it; WPA2 as a minimum.
• Create a separate guest network for IoT devices and personal devices.
• Keep your router firmware updated.

Device Security

• Use only company-approved devices for work tasks.
• Enable full-disk encryption (BitLocker on Windows, FileVault on macOS).
• Lock your screen whenever you step away — even at home.
• Never connect work devices to public USB charging ports (juice jacking).

Public Wi-Fi

Public Wi-Fi in cafes, hotels, and airports is inherently untrusted. Always use your organisation's VPN when connecting to work systems over public networks. If a VPN is not available, use your mobile data connection instead.

Video Calls and Shoulder Surfing

• Be aware of what is visible behind you on video calls — whiteboards, documents, and screens.
• Use a privacy screen on your laptop in public spaces.
• Ensure family members or housemates cannot overhear sensitive calls.

Phishing Awareness

Remote workers are prime phishing targets. Without colleagues nearby to sanity-check suspicious emails, individuals are more vulnerable. Apply the same scepticism at home as you would in the office.