Working from home has shifted from a temporary emergency measure to a permanent business model for many. However, the rapid deployment of teleworking options has, in many cases, created significant security issues that persist today.

Business owners should be aware of the multitude of potential pitfalls that employees working from home may present. Simply setting up VPN (Virtual Private Network) tunnels may seem like a secure way to protect your business network but in fact, may have the exact opposite effect.

Imagine this scenario.

Let’s say one of your employees – Mark – is working from home. Mark is a very trustworthy and valued staff member and would never do anything to cause harm to the company. Mark is diligent and uses a VPN tunnel to securely connect to his computer in the office or the file server.

Great – right?

Unfortunately, what Mark didn’t realize is that another member of the house had previously gone to a website or opened an email that installed a virus – or worse, ransomware – on the home computer a few nights ago.

While Mark is working on that big presentation for your largest client via the VPN, the screen suddenly blanks out. A message appears: all files on the work computer and the file server are now corrupt.

The Bridge to Your Network

This may sound a bit far-fetched, but the likelihood of this scenario coming true is too great to leave to chance. A VPN creates a bridge. If the computer on the home side of the bridge is infected, the malware can walk right across that bridge into your secure office network.

Employees using home computers to perform telework typically do not keep their systems as up-to-date and secure as those in the office.

• Most have not secured their home networks.
• Wi-Fi service may not be locked down with solid passwords.
• Family members may use the same device for gaming or risky browsing.

All of these issues can have devastating impacts on company networks and assets.

Warnings from Microsoft & DHS

Microsoft and the Department of Homeland Security have issued warnings about sophisticated ransomware attacks specifically targeting remote workers.

Make certain your employees are properly protecting your business by providing them the security tools they need (like company-issued devices with EDR) and imposing strict policies on how and when to access company files.

BMA Enterprises provides cost-effective, secure remote access solutions via our Managed IT Services. To learn more about securing your hybrid workforce, please contact us today.