• Support
  • Login
  • Contact
  • Blog
  • Support
  • Login
  • Contact
  • Blog
SecurityScorecard SecurityScorecard
  • Products
    PRODUCTS
    • Security Ratings
      Identify security strengths across ten risk factors.
    • Security Data
      Get actionable, data-based insights.
    • Security Assessments
      Automate security questionnaire exchange.
    • Attack Surface Intelligence
      NEW
      On-demand contextualized global threat intelligence.
    • Automatic Vendor Detection
      Uncover your third and fourth party vendors.
    • Cyber Risk Quantification
      Translate cyber risk into financial impact.
    • Reporting Center
      Streamline cyber risk reporting.
    • SecurityScorecard Marketplace
      Discover and deploy pre-built integrations.
    SERVICES
    • Active Security Services
      Test your security controls.
    • Cyber Risk Intelligence
      Partner to obtain meaningful threat intelligence.
    • Digital Forensics & Incident Response
      Prepare to respond to any threat.
    • Third-Party Risk Management
      Reduce risk across your vendor ecosystem.
    BUY NOW
    • Compare All Plans
      Choose a plan that's right for your business.
    • Try Free Account
      Make informed decisions with confidence.
    • Buy Pro Now
      Add automated event responses.
    • Buy Business Now
      Expand on Pro with vendor management and integrations.
    • Request Enterprise Demo
      See the capabilities of an enterprise plan in action.
    icon__SSClogoMark icon__SSClogoMark

    Understand and reduce risk with SecurityScorecard.

    Free account sign up
  • Solutions
    BY USE CASE
    • Compliance
    • Cyber Insurance
    • Digital Forensics
    • Due Diligence
    • Enterprise Cyber Risk
    • Executive-Level Reporting
    • Incident Response
    • Regulatory Oversight
    • Third-Party Risk
    BY INDUSTRY
    • Critical Infrastructure
    • Enterprise
    • Financial Services
    • Government
    • Healthcare
    • Insurance
    • Retail & Consumer
    • Technology
    Help your organization calculate its risk
    View All Solutions
  • Customers
    OUR CUSTOMERS
    • Customer Overview
      Trusted by companies of all industries and sizes.
    • Peer Reviews
      Find out what our customers are saying.
    SUCCESS AND SUPPORT
    • Customer Success
      Receive award-winning customer service.
    • Support
      Get your questions answered by our experts.
    COMMUNITY
    • SecurityScorecard Connect
      Engage in fun, educational, and rewarding activities.
    • Connect Login
      Join our exclusive online customer community.
    icon__SSClogoMark icon__SSClogoMark
    Understand and reduce risk with SecurityScorecard.
    Free account sign up
  • Partners

    Partner Program Overview

    Partner with SecurityScorecard and leverage our global cybersecurity ratings leadership to expand your solution, deliver more value, and win new business.

    Learn more
    • Locate a Partner
      Access our industry-leading partner network.
    • Value-Added Resellers
      Enter new markets, deliver more value, and get rewarded.
    • Managed Service Providers
      Meet customer needs with cybersecurity ratings.
    • ISAC Partner Program
      Learn more about the industries we support and ISAC member benefits.
    • Technology Alliances
      Access innovative solutions from leading providers.
    • SCORE Portal Login
      Use the SCORE Partner Program to grow your business.
    • SecurityScorecard Marketplace
      Find a trusted solution that extends your SecurityScorecard experience.

    Understand and reduce risk with SecurityScorecard.

    Free account sign up
  • Resources
    RESOURCES
    • Resource Center
      Explore our cybersecurity ebooks, data sheets, webinars, and more.
    • SecurityScorecard Blog
      Read the latest blog posts published weekly.
    • Research & Insights Center
      Access our research on the latest industry trends and sector developments.
    • SecurityScorecard Academy
      NEW
      Complete certification courses and earn industry-recognized badges.
    TOOLS AND DOCUMENTATION
    • Free Security Rating
      Get your free ratings report with customized security score.
    • Product Release Notes
      Visit our support portal for the latest release notes.
    • Free Account Signup
      Start monitoring your cybersecurity posture today.
    • Chrome Extension
      NEW
      Show the security rating of websites you visit.
    • Assessments ROI Calculator
      Calculate the ROI of automating questionnaires.
    Trust begins with transparency. Take a look at the data that drives our ratings.
    Learn more
  • Company

    Working at SecurityScorecard

    Committed to promoting diversity, inclusion, and collaboration–and having fun while doing it.

    Join our team
    • About Us
      SecurityScorecard is the global leader in cybersecurity ratings.
    • Leadership
      Meet the team that is making the world a safer place.
    • Press
      Explore our most recent press releases and coverage.
    • Events
      Join us at any of these upcoming industry events.
    • Policy Insights
      Raising the bar on cybersecurity with security ratings.
    • Careers
      APPLY TODAY
      Come join the SecurityScorecard team!
    • Contact Us
      Contact us with any questions, concerns, or thoughts.
    • Trust Portal
      Take an inside look at the data that drives our technology.
    • Help Center
      We are here to help with any questions or difficulties.
Request a demo
SecurityScorecard SecurityScorecard
  • Support
  • Login
  • Contact
  • Blog
  • Support
  • Login
  • Contact
  • Blog
SecurityScorecard SecurityScorecard
  • Products
    PRODUCTS
    • Security Ratings
      Identify security strengths across ten risk factors.
    • Security Data
      Get actionable, data-based insights.
    • Security Assessments
      Automate security questionnaire exchange.
    • Attack Surface Intelligence
      NEW
      On-demand contextualized global threat intelligence.
    • Automatic Vendor Detection
      Uncover your third and fourth party vendors.
    • Cyber Risk Quantification
      Translate cyber risk into financial impact.
    • Reporting Center
      Streamline cyber risk reporting.
    • SecurityScorecard Marketplace
      Discover and deploy pre-built integrations.
    SERVICES
    • Active Security Services
      Test your security controls.
    • Cyber Risk Intelligence
      Partner to obtain meaningful threat intelligence.
    • Digital Forensics & Incident Response
      Prepare to respond to any threat.
    • Third-Party Risk Management
      Reduce risk across your vendor ecosystem.
    BUY NOW
    • Compare All Plans
      Choose a plan that's right for your business.
    • Try Free Account
      Make informed decisions with confidence.
    • Buy Pro Now
      Add automated event responses.
    • Buy Business Now
      Expand on Pro with vendor management and integrations.
    • Request Enterprise Demo
      See the capabilities of an enterprise plan in action.
    icon__SSClogoMark icon__SSClogoMark

    Understand and reduce risk with SecurityScorecard.

    Free account sign up
  • Solutions
    BY USE CASE
    • Compliance
    • Cyber Insurance
    • Digital Forensics
    • Due Diligence
    • Enterprise Cyber Risk
    • Executive-Level Reporting
    • Incident Response
    • Regulatory Oversight
    • Third-Party Risk
    BY INDUSTRY
    • Critical Infrastructure
    • Enterprise
    • Financial Services
    • Government
    • Healthcare
    • Insurance
    • Retail & Consumer
    • Technology
    Help your organization calculate its risk
    View All Solutions
  • Customers
    OUR CUSTOMERS
    • Customer Overview
      Trusted by companies of all industries and sizes.
    • Peer Reviews
      Find out what our customers are saying.
    SUCCESS AND SUPPORT
    • Customer Success
      Receive award-winning customer service.
    • Support
      Get your questions answered by our experts.
    COMMUNITY
    • SecurityScorecard Connect
      Engage in fun, educational, and rewarding activities.
    • Connect Login
      Join our exclusive online customer community.
    icon__SSClogoMark icon__SSClogoMark
    Understand and reduce risk with SecurityScorecard.
    Free account sign up
  • Partners

    Partner Program Overview

    Partner with SecurityScorecard and leverage our global cybersecurity ratings leadership to expand your solution, deliver more value, and win new business.

    Learn more
    • Locate a Partner
      Access our industry-leading partner network.
    • Value-Added Resellers
      Enter new markets, deliver more value, and get rewarded.
    • Managed Service Providers
      Meet customer needs with cybersecurity ratings.
    • ISAC Partner Program
      Learn more about the industries we support and ISAC member benefits.
    • Technology Alliances
      Access innovative solutions from leading providers.
    • SCORE Portal Login
      Use the SCORE Partner Program to grow your business.
    • SecurityScorecard Marketplace
      Find a trusted solution that extends your SecurityScorecard experience.

    Understand and reduce risk with SecurityScorecard.

    Free account sign up
  • Resources
    RESOURCES
    • Resource Center
      Explore our cybersecurity ebooks, data sheets, webinars, and more.
    • SecurityScorecard Blog
      Read the latest blog posts published weekly.
    • Research & Insights Center
      Access our research on the latest industry trends and sector developments.
    • SecurityScorecard Academy
      NEW
      Complete certification courses and earn industry-recognized badges.
    TOOLS AND DOCUMENTATION
    • Free Security Rating
      Get your free ratings report with customized security score.
    • Product Release Notes
      Visit our support portal for the latest release notes.
    • Free Account Signup
      Start monitoring your cybersecurity posture today.
    • Chrome Extension
      NEW
      Show the security rating of websites you visit.
    • Assessments ROI Calculator
      Calculate the ROI of automating questionnaires.
    Trust begins with transparency. Take a look at the data that drives our ratings.
    Learn more
  • Company

    Working at SecurityScorecard

    Committed to promoting diversity, inclusion, and collaboration–and having fun while doing it.

    Join our team
    • About Us
      SecurityScorecard is the global leader in cybersecurity ratings.
    • Leadership
      Meet the team that is making the world a safer place.
    • Press
      Explore our most recent press releases and coverage.
    • Events
      Join us at any of these upcoming industry events.
    • Policy Insights
      Raising the bar on cybersecurity with security ratings.
    • Careers
      APPLY TODAY
      Come join the SecurityScorecard team!
    • Contact Us
      Contact us with any questions, concerns, or thoughts.
    • Trust Portal
      Take an inside look at the data that drives our technology.
    • Help Center
      We are here to help with any questions or difficulties.
Request a demo
SecurityScorecard SecurityScorecard
BLOG

10 Ways to Keep Your Remote Workforce Safe

Private: Michelle Wu
10/08/2020

Due to the COVID-19 pandemic, more companies are managing remote workforces than ever before. According to an IDG survey released in April, 78% of employees were working from home more than 60% of the time during the quarantine.

That trend is likely to continue; although some workplaces are opening back up, many companies plan to keep their workforces remote for a while; research from Brandon Hall Group found that one-third of companies believe more than half of their workforce will continue to work from home even after the pandemic ends. For example, many companies are deliberately hiring remote workforces, with the understanding that their newest hires will be working from home indefinitely.

While remote work is an important way to keep the workforce safe and healthy, it may pose a cyber risk for your organization. Ponemon’s latest Cost of a Data Breach report found that 76% of the companies with remote employees worried that remote work would increase the time to identify and contain a breach, while 70% believe remote work will increase the cost of a data breach.

Those concerns are reasonable. Remote employees increase an organization’s attack surface, are more difficult to monitor than those who work on-site, and — feeling secure at home – may cut corners when it comes to cybersecurity. So how do you keep your remote workforce safe from attack and your data secure?

10 ways to keep remote workers safe from data breaches

1. Beware personal devices

When employees work from home, they tend to use their own devices. These devices tend to be less secure than those issued by a workplace; software may not be updated, security applications may not be updated (or even installed), and passwords may be weak. If possible issue devices to your team that have been purchased by the workplace and are provisioned by your IT team. If that isn’t possible, however, ask IT to do what it can to tighten the security around each team member’s personal devices.

2. Use RDP sessions sparingly and with controls in place

When you ask IT to make personal devices more secure, chances are, most IT departments will want to use RDP to get in, get the job done quickly, and get out. But although RDP sessions are a useful tool, they can be hijacked by bad actors, who scan the Internet seeking out open RDP ports. Consider enabling RDP on only the devices that need them, and tighten your own security by using strong passwords, multi-factor authentication, and lockout policies.

3. Reorganize your VPN connections

Your security team should be rethinking its management of your virtual private network; it’s probably not possible (or practical) to extend VPN connections to every employee, so think about which employees really need access to specific sensitive data in order to do their jobs. Such a reorganization of VPN connections will ensure that most employees only have access to the information they need. Should one team member suffer a breach, the attackers won’t be able to access all your sensitive information.

4. Make sure your employees know the basics when it comes to their routers

IT can’t come to everyone’s home and segment every employee’s router, so it’s important to educate your employees about network security in their own homes. Train your workers to set up their network so data is safe, creating one network for personal use, a second one for personal devices, and a third for work devices. By doing this, employees can prevent cybercriminals from hacking work devices by targeting family members.

5. Don’t forget application security

Even your most tech-averse employee has probably noticed that their apps aren’t secure. They may mention a product in conversation and then see an ad for it in their social media. Open mics and cameras can also offer bad actors a way into your data. Offer training to your team so that they can lock down their apps and the apps used by family members. Your team should also take a hard look at your own applications — if one application gets hacked, is your entire network exposed? Consider using X.509 certificates and integrating them with a passwordless solution. Not only will an application-centric approach to security make your applications more secure, but it will also reduce your organization’s reliance on VPNs.

6. Keep data stored in the cloud

Your team may be tempted to store work data on their own devices at home, but due to the insecure nature of home wi-fi networks and personal devices, that should be discouraged. Keep your data stored in a secure cloud, or use applications that support a virtual desktop space for team members when they’re working. And of course, make sure that the cloud provider is secure and doesn’t have a history of breaches.

7. Make use of single sign-on

Usernames and passwords are hard to manage at the best of times. Now, when your workforce is working on whatever devices and apps are available to them at home, the username-password system is increasingly fraught (when you’re signing into a suite of tools, it’s hard to remember every unique, secure, 8-character password) and unreliable (what if someone is just using the same password over and over.) To manage this and make things simpler, use a single sign-in tool that allows users to easily and securely sign on to the apps they need for work.

8. Prepare for a breach

What will you do if there’s a data breach? What happens if a worker’s physical device is stolen? Are backup systems in place to ensure productivity continues even if your systems and networks are breached? No one likes to consider that a breach might happen, but if one does, it’s best to have a plan.

9. Remember: security is everyone’s job

Security is always everyone’s job, but if your team is remote, you must make sure that everyone on your team knows the basics of security. Training can help your workers spot phishing attempts, for example, and can also help your employees set up their devices so that they are as secure as possible.

10. Use tools that monitor endpoints and remote employees

Ponemon’s Cost of a Data breach report recommends organizations tighten up security by using tools that offer security teams “deeper visibility into suspicious activity on the company and bring your own (BYO) laptops, desktops, tablets, mobile devices, and IoT, including endpoints the organization doesn’t have physical access to.”

How can SecurityScorecard make your remote team more secure?

SecurityScorecard’s risk ratings can help you monitor your own organization’s safety, as well as the safety of important third parties — cloud storage vendors, for example. Our ratings easy-to-understand security ratings continuously monitor your organization’s information security across 10 groups of risk factors, including endpoint security and application security. Our tools also allow you to monitor the cyberhealth of your vendors, so that you’ll be able to quickly investigate and respond if you or a vendor falls out of compliance.

By continuously monitoring your security, you’ll be able to better protect your remote team and your data.

Return to Blog
Join us in making the world a safer place.
FREE ACCOUNT SIGN UP
Products
Solutions
Customers
Marketplace
Partners
Resources
Company
Trust Portal
Security Ratings
Login
Blog
Contact
Careers

SecurityScorecard
Tower 49
12 E 49th St
Suite 15-100
New York, NY 10017

[email protected]

United States: (800) 682-1701
International: +1(646) 809-2166
Social-linkedin Social-facebook Twitter Instagram Youtube