Mobile & Remote Work Security

Working from home, from a coffee shop, or from a client site creates new security risks. Learn how to work securely wherever you are, protecting your organization’s data on any device and any network.

What You Will Learn

Working from home, from a coffee shop, or from a client site creates new security risks. This module teaches you how to work securely wherever you are, protecting your organization’s data on any device and any network.

• Public Wi-Fi risks: why coffee shop networks are dangerous and how to protect yourself
• VPN basics: what a VPN does and when to use one
• Device security on the go: laptops, phones, and tablets away from the office
• Home network security: securing your home Wi-Fi and work setup
• BYOD rules: using personal devices for work safely

The Remote Work Security Challenge

Remote work blurs the line between office security and personal space. When you work from home or a public location, you lose the protections of your office network: firewalls, controlled access, and physical security. Your home Wi-Fi, your personal phone, and the coffee shop network all become part of your organization’s security perimeter.

Quick Check

You are working from a coffee shop and need to access patient records. The cafe offers free Wi-Fi. What should you do?

Public Wi-Fi Risks

Public Wi-Fi networks in coffee shops, airports, hotels, and libraries are convenient but risky. The same openness that makes them easy to connect to also makes them easy for attackers to monitor. On an unsecured network, someone with the right tools can see the websites you visit, capture passwords, and inject malware into your traffic.

Quick Check

Your organization provides a VPN but you rarely use it because it seems complicated. Why should you start using it?

VPN Basics

A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a secure server. All your internet traffic flows through this tunnel, so even if someone is monitoring the network, they only see encrypted data.

STM can deploy and manage VPNs for your organization. Popular options include NordLayer, Cisco AnyConnect, and OpenVPN. A good VPN should connect automatically when you start your device and require no ongoing management from you.

Device Security on the Go

• Enable full-disk encryption on all laptops. If a laptop is lost or stolen, the data is unreadable without the password.
• Enable remote wipe on phones and laptops so you can erase data if a device is lost.
• Use screen locks on all devices: PIN, password, fingerprint, or face recognition.
• Keep devices with you at all times in public. Do not leave them unattended even for a moment.
• Do not leave laptops visible in cars. Put them in the trunk before you arrive at your destination.

Home Network Security

Your home Wi-Fi is now part of your organization’s security perimeter. Here is how to secure it:

• Change the default router password. Default passwords are publicly known and easily guessed.
• Use WPA2 or WPA3 encryption. This encrypts traffic between your devices and your router.
• Change the network name (SSID) to something that does not identify you or your organization.
• Keep firmware updated. Router updates include security patches. Check for updates every few months.
• Use a separate network for guests. Many routers support a guest network that isolates visitors from your work devices.

How This Looks in Your Industry

Healthcare Practices

Telehealth appointments, remote EHR access, and patient communication from home all create HIPAA risks. A VPN is essential for any remote access to patient data. Home printers should not be used for patient documents unless they are part of an approved print system.

Legal Firms

Reviewing case files from home is common, but using personal cloud storage or email for privileged documents creates risk. Use approved document management systems with VPN access. Be cautious about taking physical case files home.

Nonprofits

Remote work is common in nonprofits with distributed teams. A VPN and approved cloud tools protect donor data and grant information. Ensure volunteers who work remotely follow the same security practices as staff.

Daycares and Schools

Remote access to student information systems from home creates FERPA and COPPA risks. Use VPNs for any remote access to student data. Do not store student records on personal devices.

Key Takeaways

• Public Wi-Fi is not secure. Use a VPN or your phone hotspot before accessing any work systems.
• A VPN encrypts all your internet traffic, protecting your data on any network.
• Enable full-disk encryption and remote wipe on all laptops and phones.
• Secure your home Wi-Fi: change the default password, use WPA2/WPA3, and keep firmware updated.
• Never leave devices unattended in public. Put laptops in the trunk before you arrive at your destination.

Module Quiz

Select an answer for each question to reveal the correct response and explanation.

Module 08 of 10 – Cybersecurity Essentials Training

Previous ModuleBack to ResourcesNext Module