Everyone works from home now. A quick checklist
Offices are closing overnight. Here’s what to sort out first so remote work doesn’t become remote risk.
In a few days, most office work moved home. IT teams are setting up laptops and VPNs in a rush. Attackers know it.
What I’d sort out first:
- MFA on email and the VPN. Every remote login now comes from outside. A stolen password shouldn’t be enough.
- Patch the VPN and remote access gateway. They just became your most important systems.
- Company laptops where possible. Family PCs share passwords, games and malware.
- Remote desktop through the VPN only, never open to the internet.
- One clear channel for IT help, and tell staff IT will never ask for their password.
- Payment changes confirmed by phone. Finance teams apart from each other are an easy target.
Expect phishing about remote work, VPN updates and new tools. Keep the basics simple and repeat them often.