The aim is not to make home working complicated. It is to decide which devices may be used, how accounts are protected, where business information belongs and how staff get help.
Use a managed work device where possible
A business device can be configured, updated and supported against an agreed standard. Personal devices may contain unrelated applications, shared family accounts or data that the business cannot manage properly.
If personal-device use is allowed, write down the minimum requirements and which information may be stored locally.
Protect every business account
- Use a unique password for each service
- Require multi-factor authentication where available
- Prefer phishing-resistant authentication for important accounts where practical
- Do not share named user accounts
- Remove access promptly when a person leaves or changes role
- Keep recovery details and emergency-access procedures current
Unexpected MFA prompts should be treated as a warning. Staff should deny the request and report it through a trusted channel.
Keep devices supported and updated
Operating systems, browsers, office applications, security software and remote-access tools need current security updates.
Automatic updates help, but somebody should still own the process. A device that is switched off or disconnected for long periods can fall behind.
Unsupported systems should be replaced, isolated or handled under a documented exception with a clear owner.
Secure the home network
Change default router administration credentials, use current WiFi encryption supported by the equipment, install router updates where the vendor provides them and disable remote administration when it is not needed.
Use a guest network for visitors and untrusted smart devices when the router supports it. Do not assume that a VPN repairs an insecure or unsupported endpoint.
Use approved storage and sharing
Business information should be kept in approved locations such as the agreed OneDrive, SharePoint, Teams, file server or line-of-business system.
Avoid personal email, consumer storage accounts and unmanaged USB devices. Review external sharing rather than leaving old links active indefinitely.
Synchronisation provides access and collaboration. It is not a complete backup strategy. Read the business backup guide.
Protect calls and conversations
Use the meeting controls that fit the sensitivity of the discussion. This can include waiting rooms, authenticated participants, controlled screen sharing and careful recording permissions.
Headphones and a private working area can matter as much as a technical setting when confidential information is discussed.
Plan for loss or theft
Full-disk encryption can protect stored information when a device is lost. Remote-management capabilities may help the business restrict access or remove managed data, depending on the platform and configuration.
Staff should know how to report a missing device immediately, who can disable accounts and what evidence should be preserved.
Make support easy to reach
Remote staff need a trusted way to report suspicious messages, failed sign-ins and device problems. They should know how the support team will verify its identity before requesting access.
Never allow an unexpected caller to install remote-control software merely because they claim to be from IT.
Remote work checklist
- Is the device approved and supported?
- Are disk encryption and screen locking enabled?
- Are operating systems and applications current?
- Is MFA required for important accounts?
- Is business information stored only in approved places?
- Is external sharing reviewed?
- Is important data backed up separately?
- Is the home router configured safely?
- Does the user know how to report a suspicious event?
- Can the business remove access when the device or account is lost?
The answer does not need to be identical for every role. It does need to be deliberate, documented and supportable.
A sensible next step
Talk to Kwik Support
Tell us about the current setup, the problem you are trying to solve and the outcome your business needs.