Aboitiz Group

Charmaine Valmonte is a certified cybersecurity professional with 30+ years of experience in the U.S. Military and the private sector. Experienced in building cyber risk and IT security programs with highly effective teams focused on reducing the risks of security breaches, minimizing disruptions to preserve brand reputation and building client confidence.

Through this article, Charmaine Valmonte emphasizes the critical need for robust cybersecurity measures in the era of remote work. Valmonte, with over 30 years of experience, outlines key strategies for leaders to safeguard their organizations against potential cyber threats. These strategies include implementing endpoint security for home networks, modernizing network security and providing ongoing cyber hygiene training for remote employees.

1. Endpoint Security for Home Networks

Remote work immediately expands an organization’s attack surface by increasing the number of connections and endpoints accessing corporate networks. Unlike a controlled office environment, home networks typically lack robust security controls. We can consider the home a coffee shop filled with vulnerabilities, making your employee’s devices more vulnerable to cyberattacks.

Why Endpoint Security Matters

Every device connected to a corporate network is a potential entry point for attackers. Remote workers using personal devices or home networks do not have to employ enterprise-grade firewalls and monitoring systems that will continue to heighten risk. Endpoint security is a critical focus for reducing vulnerabilities and protecting sensitive data.

Recommendations

● Endpoint Detection and Response (EDR): Deploy EDR solutions across all employee devices. EDR tools provide real-time threat detection and automated responses, allowing IT teams to identify and contain potential breaches before they escalate.

● Firewalls and Antivirus Software: Ensure all endpoints have robust firewalls and antivirus solutions. Firewalls protect devices by filtering malicious traffic, while antivirus software detects and eliminates known malware.

● Network Segmentation: Mandate employees to create separate home networks for work devices to limit potential cross-contamination from personal or IoT devices connected to these home-based networks.

Key Actions for Leadership

Invest in enterprise-grade endpoint protection to ensure all devices connecting to the enterprise network comply with your security policies.

“Securing a remote workforce is no longer optional; it’s critical to maintaining operational resilience and protecting sensitive corporate data.”

2. VPN vs. SASE: Modernizing Network Security

For years, businesses have relied on Virtual Private Networks (VPNs) to secure remote access to corporate systems. However, as cloud services become integral to operations, VPNs are limited in performance, scalability and security. Secure Access Service Edge (SASE) is an emerging alternative integrating network and security services into a single cloud-based solution.

VPN: The Traditional Approach

VPNs create encrypted tunnels between remote workers and corporate networks, safeguarding data in transit. However, VPNs often suffer latency issues, especially when routing traffic through central data centers. Additionally, VPNs lack native support for cloud applications, requiring additional layers of security for cloud access.

SASE: The Modern Solution

SASE simplifies network security by combining software-defined wide-area networking (SD-WAN) with cloud-native security functions such as secure web gateways, firewalls and zero-trust network access. This architecture enables direct, secure connections to cloud services, bypassing the need for VPN backhauls. SASE also scales more quickly as the remote workforce grows and diversifies.

Key Benefits of SASE

● Cloud-Native Security: SASE integrates security directly into cloud services, reducing the need for on-premise infrastructure.

● Improved Performance: By enabling direct-to-cloud connections, SASE minimizes latency, improving the user experience.

● Scalability: SASE is designed for dynamic, global workforces, allowing companies to scale security services in real time.

Key Actions for Leadership

Evaluate your organization’s reliance on cloud services and consider whether shifting to SASE can enhance security and performance.

3. Cyber Hygiene Training for Remote Employees

Human error remains one of the top causes of data breaches, and remote employees are prime targets for phishing, social engineering and credential theft. Ongoing cybersecurity awareness training is essential to mitigate these risks.

Why Cyber Hygiene Matters

Employees are often the first line of defense against cyberattacks. Without proper training, they may unknowingly open the door to phishing attempts, malware infections or social engineering attacks. Cyber hygiene training ensures that employees recognize and avoid these threats, significantly reducing the likelihood of successful attacks.

Designing Effective Training Programs

● Phishing Awareness: Regularly educate employees on identifying suspicious emails, links and attachments. Simulated phishing attacks can be an effective way to test their awareness.

● Social Engineering Tactics: Train employees to recognize and avoid attempts to manipulate them into divulging sensitive information. This includes impersonation scams or fraudulent requests from seemingly legitimate sources.

● Password Security and MFA: Ensure employees use strong, unique passwords and multi-factor authentication (MFA) to secure their accounts. Consider implementing password managers to simplify compliance.

Key Actions for Leadership

Regularly update training materials to reflect the evolving threat landscape and track employee participation and performance to ensure compliance.

4. Securing Cloud Collaboration Tools

The risk of data leakage and unauthorized access has increased with the rapid adoption of cloud collaboration tools such as Microsoft Teams, Slack and Zoom. These platforms are essential for maintaining productivity but also introduce vulnerabilities if not properly secured.

Vulnerabilities of Cloud Collaboration Tools

● Misconfigured Permissions: Employees may inadvertently share files or grant access to unauthorized users.

● Lack of End-to-End Encryption: Some collaboration tools encrypt data only in transit, leaving it vulnerable to interception at other points.

● Shadow IT: Employees may use unapproved or unsanctioned tools, bypassing corporate security measures and creating gaps in oversight.

Best Practices for Securing Cloud Tools

● Restrict File Sharing: Limit file sharing to verified users and internal teams. Apply encryption to sensitive files, ensuring data is protected even if accidentally shared.

● Enable End-to-End Encryption: Use platforms that offer end-to-end encryption for both data in transit and at rest. This is particularly important for highly sensitive conversations or document sharing.

● Implement IAM and SSO: Integrate Identity and Access Management (IAM) solutions and Single Sign-On (SSO) to centralize user authentication. This reduces the likelihood of unauthorized access and simplifies user management.

● Monitor User Activity: Use built-in monitoring tools to track user access and sharing behaviors. Regular audits of activity logs can identify potential security issues before they escalate.

Key Actions for Leadership

Set clear policies for cloud collaboration, including which tools are approved and how they should be used.

Securing a remote workforce is no longer optional; it’s critical to maintaining operational resilience and protecting sensitive corporate data. A comprehensive approach—encompassing endpoint security, network access, employee training and collaboration tool safeguards—is essential for mitigating the risks of remote work.