We recognize that every organization has its own IT policies and procedures. When it comes to security, we suggest treating your WBN Certified Professional™ (CP) like any other remote-working member of your team.
Below you will find WBN’s best practices, which were created in association with several IT experts. If you need assistance with installing any software or hardware, please contact your WBN Success Coach.
Internet
- Consider having your CP use a VPN (virtual private network). When connecting to the internet through a VPN, your traffic is encrypted. No one can see what you do online or interfere in any way. When using a VPN, you may want to recommend to your CP to choose a US-based server.
- With regard to WiFi, we recommend that you encourage your CP to connect to the internet via an encrypted connection and use a strong WiFi password (see more on passwords below). WPA2, while not perfect, is currently the most secure choice and is preferred over WEP-encrypted networks.
- If the CP’s WiFi router allows, have their computer on a separate network from their other devices. This can sometimes be done by putting other devices on a guest network.
Data
- Tell your CP that all documents and other data should be stored on your servers or on the cloud-based storage that you use.
- No data should be stored locally on their computer or uploaded to personal cloud services.
- Consider restricting the information that your CP can access by limiting the access levels in your IT infrastructure. It’s best to ensure that CPs only have access to information necessary to complete their jobs.
Passwords & Access
- With regard to your CP’s use of applications, your CP should have their own login and password. Do not share credentials to ensure that you can verify who has accessed an application or revoke access to applications as needed.
- Consider using a password manager that you can access as well. Some password managers can be set up to give CPs temporary access to certain applications without the CP ever knowing the password.
- Instruct your CP to use strong passwords. This means they should never reuse passwords that have been used elsewhere.
- When possible, enforce multi-factor authentication for applications with highly confidential data. 2FA or two-factor authentication using email or text messages in addition to a username and password is a standard added layer of protection.
- Remind your CP to be diligent when replying to emails or providing information; always ensure that the sender is legitimate and not a spoofed or false address. Never provide any payment or personally identifying information in an email.
Hardware
- Tell your CP to turn off their computers at the end of each work day. If this is not possible or appropriate, ask them to reboot their computers once a day.
- All devices and software should be configured to either automatically install updates or at least notify when updates are available (and they should be installed within 24 hours of the notification).
- Computers used for CP work must have malware protection and anti-virus software. This ensures that your critical business information is not stolen.
- Request the use of a modern operating system; end-of-life or unsupported operating systems like Windows 7 cannot be patched for security vulnerabilities and present risks.
Watch Our Cybersecurity Webinar
To enhance your understanding of IT security best practices and learn how to protect your business from cyber risks, we invite you to watch our webinar: "Cybersecurity in 2024: What Every Business Owner Needs to Know."
In this insightful session, our experts discuss real-world cybersecurity challenges, including data breaches, ransomware, and other risks that could impact your business. You'll also gain actionable tips and strategies to ensure your team, including WBN Certified Professionals, follows industry-leading practices for IT security.
Connect with the Experts:
- Bones Ijeoma, Managing Partner at All Safe IT on LinkedIn.
- Gordon Coyle, Principal & Chief Risk Architect at The Coyle Group on LinkedIn.
More about WorkBetterNow:
Like this video? Click on over and subscribe to our YouTube channel!
Follow WorkBetterNow on LinkedIn.