März 10, 2020

Tips for Securing and Enabling Large Groups of Remote Workers

Carl Eberling

In response to current global events, many companies are beginning to implement work from home plans to help keep employees and others around them safe. Situations like the one we’re facing today can require IT organizations to support a surging number of employees working from home.

Here are some tips to secure and enable remote workers:

1) Rely on your organizations’ emergency preparedness or business continuity plans.

Now’s not the time to re-invent the wheel. Use this opportunity to validate work from home security and capacity assumptions.

  • Understand workflows by department to better understand what applications those groups of employees need to get their jobs done.
  • Implement a rolling work from home policy for a limited number of employees or locations at a time in order to test access by department or work type. 
  • Spend time thinking through your communication strategy. Will you communicate at the department level? Regional or office level? How will you communicate the most important updates to all employees?

2) Test your security plans for both access and capacity.

Key here is to think through how well your existing security strategy scales to accommodate a large increase in remote workers.

  • Are you factoring in requirements for on-premises, cloud applications and hybrid environments your employees need to access to do their jobs?
  • Does your single-sign-on platform incorporate appropriate levels of security? If not, what gaps need to be addressed?
  • On the cloud application front: do the cloud applications your employees use have appropriate levels of elasticity? Can you easily scale to hundreds or even thousands of users to support bursts of users?

3) Test your VPN for both security and capacity.

A strong VPN strategy is a foundational piece of keeping people and data secure. This is even more true as organizations plan to accommodate large groups of remote workers.

  • Understand the total number of remote workers you need to support and plan a 2x VPN capacity of that number to ensure consistent operations.
  • Test for security and capacity at the department level. What applications do marketers need to use compared to developers or finance and accounting? Like mentioned previously, a rolling work from home program can help you test at this level.
  • Create separate private, performance-focused VPN connections for dedicated groups of employees to accommodate critical work. For example, you may create a specific VPN for accounting team members to access during end of quarter activities. Or you may create a specific VPN for development team members to accommodate their building key feature enhancements to internal core business applications.

Emergencies happen. That’s why organizations create business continuity plans in the first place. Use this opportunity to validate and scale work from home assumptions. Make sure your VPN and broader security strategy covers all applications your workforce needs to do their jobs no matter where those applications reside. Following these tips can go a long way to ensuring your organizations’ security without sacrificing employee productivity.

Scale your security strategy to protect people and data wherever work happens—learn more here.

Carl Eberling

Carl Eberling serves as Chief Information Officer at Forcepoint. In the role, he oversees all information technology, facilities and procurement matters for the company. Prior to Forcepoint, he served as an advisor to startups developing new technology. Before then, he served as SVP Information...

Read more articles by Carl Eberling

Über Forcepoint

Forcepoint ist einer der weltweit führenden Anbieter von Cyber-Sicherheit im Bereich Anwender- und Datensicherheit und hat es sich zur Aufgabe gemacht, Organisationen zu schützen und gleichzeitig die digitale Transformation und das Wachstum voranzutreiben. Unsere Lösungen passen sich in Echtzeit an das Nutzerverhalten an und ermöglichen Mitarbeitern einen sicheren Datenzugriff bei voller Produktivität.