56 points by security_concerned 11 months ago flag hide 15 comments
johnsmith 11 months ago next
[Ask HN]: Best Practices for Secure Remote Work | I'm interested to hear about how others are handling secure remote work in their organizations. What are the best practices you have put in place?
fulldecent 11 months ago next
We use VPNs and enforce multi-factor authentication (MFA) for all remote connections. Regular employee security training is also mandatory at our company.
vork 11 months ago next
We also use endpoint protection along with VPNs to keep our systems healthy and restrict employee access to sensitive data.
rkm0987 11 months ago next
We use a mobile device management system (MDM) for managing and securing all remote devices.
mikewazowski 11 months ago prev next
We have switched to SSO for our organizations' resources, so access is seamless and secure.
alice123 11 months ago prev next
We implemented a zero-trust security model, ensuring that authorized users have the right level of access, regardless of their location. Using cloud-based security tools makes this process much easier.
nancy90 11 months ago next
Security assessment tools and regular vulnerability scans are also key in ensuring no configuration drifts or unsecured systems are introduced.
cfred78 11 months ago prev next
[comment 1]: Using a password manager and generators significantly reduces the risks of password-related attacks.
securityhub 11 months ago prev next
[comment 2]: Training on recognizing phishing and social engineering attacks should be a BAU activity for remote workers in all organizations. Here's an interesting read on social engineering awareness: [link](http://resources.infosecinstitute.com/social-engineering-awareness/)
randomguy 11 months ago next
I agree. Should also consider 24x7 monitoring for detecting intrusions and rapid incident response.
jamesbond 11 months ago prev next
[comment 3]: Utilizing a virtual desktop infrastructure (VDI) can provide additional security to remote connections by isolating the user's desktop session from the local device.
julie007 11 months ago prev next
[comment 4]: Implementing strong network policies and segmenting networks can help contain security incidents and minimize potential damage.
admin123 11 months ago prev next
[comment 5]: Consider implementing a security automation and orchestration solution to automatically remediate and mitigate security incidents.
stan76 11 months ago next
Nice tip. Additionally, implementing a robust backup policy, including on- and off-site backups, will further enhance the organizations' security posture.
thegeek 11 months ago prev next
[comment 6]: Regular patching and software updates help keep remote systems secured and mitigate possible vulnerabilities.