The office is everywhere, and so are the risks
Remote work is normal in many small businesses. The laptop sits on the kitchen table, on the train or in a café. That's convenient, but the office's protective layer is missing: no company firewall, unknown Wi-Fi, family members on the same computer.
Here are the basics I recommend for working securely on the go.
1. Company devices, not private computers
The most important point. Private computers mix games, kids' apps and company data, and you have no control over updates.
- Company laptop with disk encryption
- Central management for updates, antivirus and remote lock
- No admin rights for everyday work
If a private device can't be avoided, use only a protected browser access or a virtual desktop, without storing data locally.
2. Secure sign-in
From outside, sign-in is the gateway to the company. MFA is a must, ideally with passkeys. More in password managers and MFA and passkeys.
3. Access to company data
Two common approaches:
- Cloud services such as Microsoft 365 with conditional access: sign-in only from managed devices
- VPN to the office network if data still lives on a server in the office
Either way: never expose remote access directly to the internet (such as Remote Desktop without VPN). It's one of the most common entry points.
4. The home network
- Change the router password, keep firmware updated
- WPA3, or WPA2 with a long password
- Smart-home devices in a guest network where possible
More on networks in office Wi-Fi; much of it applies at home too.
5. Public Wi-Fi
In cafés or hotels, prefer the company phone's hotspot. If you must use public Wi-Fi, only with VPN on and no confidential calls within earshot.
6. Paper, screens and conversations
- Privacy screen for trains and cafés
- Lock the screen when you get up, at home too
- Don't throw printouts with personal data into household waste
- Blur the video background if confidential documents are in the room
7. Clear written rules
A short remote work policy creates clarity: which devices, which networks, what to do on loss? Loss or theft must be reported immediately so the device can be locked.
Checklist
FAQ
Do we need a VPN if everything is in Microsoft 365? Not necessarily. Then conditional access and managed devices matter more.
Can a partner share the company laptop? Better not. A separate family device is the simplest protection.
Conclusion
Secure remote work depends on a few things: managed devices, strong sign-in and no open remote access. We help with this under IT security and Workplace & Microsoft 365.
