The ten most important security measures for remote work

Remote work has become normal for many organizations. People work on other networks, sometimes on their own devices, and out of sight of IT. These are the ten most important security measures for working safely from home with Microsoft 365.

The top 10

1. MFA for everyone, preferably with Microsoft Authenticator or passkeys. Read what is MFA?
2. Conditional Access: only allow access from managed or compliant devices, and block legacy sign-in protocols.
3. Managed devices with Intune: require updates, encryption and antivirus. Read Intune basic setup.
4. Automatic updates for Windows, Office and browsers.
5. Encrypt laptops with BitLocker.
6. Microsoft Defender for Endpoint and for Office 365, against malware and phishing.
7. Files in OneDrive and SharePoint instead of on a USB stick or home drive, with PC folder backup.
8. Limit access on personal devices: browser only, no downloads. Read block downloads on unmanaged devices.
9. Awareness: train staff with phishing simulations.
10. Least privilege for admins, with separate admin accounts and Privileged Identity Management.

Tips for employees

• Secure your home Wi-Fi with a strong password and keep the router updated.
• Lock your screen with Windows + L when you walk away.
• Don't click links in emails without thinking, and report suspicious messages.
• Don't use personal apps to share work files.

Measure it

Use Microsoft Secure Score to see how your organization scores and which measures are still open.

Read also

What is Multi-Factor Authentication (MFA)?
Improve your security with Microsoft Secure Score
Block downloading Microsoft 365 files on unmanaged devices

Nederlandstalige versie: De tien belangrijkste beveiligingsmaatregelen voor thuiswerken

---

More in English