Read our blog

Making your business better with a hands-on approach to sustainable results. Understand what is hidden behind the latest trends in strategy, technology, operations, marketing and sales. Read a selection of our publications covering a variety of hands-on materials: analyses, case studies, best practice methodologies and practical solutions that have proven their value over time.

How to implement and maintain good cyber security practices for remote working — a business approach

25 October 2023
8 minutes

Last Updated on 28 November 2025 at 11:44

In crisis situations, such as a pandemic, natural disaster, or political or economic instability, almost everyone is increasingly willing to move to teleworking. But teleworking is not the only solution to ensure business continuity.

In crisis situations, companies are quick to

 

Continue to read ... This part is protected.

Poursuivre la lecture ... contenu spécial en accès rapide.

The technological aspect of ICT

Often, the technological and ICT (information and communication technology) aspect, which covers hardware, software and maintenance, is left aside. As for cyber security, it is even more neglected because it is a subject perceived as“too complex“.

Maintaining best practices

 

Continue to read ... This part is protected.

Poursuivre la lecture ... contenu spécial en accès rapide.

Procedures to follow to ensure cyber security

Suppose your company has already implemented a successful remote working project. In that case, it is likely that you also have

 

Continue to read ... This part is protected.

Poursuivre la lecture ... contenu spécial en accès rapide.

Authentication as a cybersecurity measure

 

Continue to read ... This part is protected.

Poursuivre la lecture ... contenu spécial en accès rapide.

Preventing malicious intrusions

The 3 points below can offer a level of security that is similar to that on the company premises (as long as

 

Continue to read ... This part is protected.

Poursuivre la lecture ... contenu spécial en accès rapide.

Making the right cybersecurity choices

In the first phase, it is important not to go for a large-scale project. Indeed, this type of project can last from 4 to 18 months, depending on the size and context of the company. Even if the need for remote working is urgent, it will be necessary to contain, as far as possible, these urges.

In a crisis situation, the company cannot properly assess the needs or the security situation.

Not to mention that during these periods, vendors of cybersecurity solutions take advantage of the moment to increase their prices. There are also other risks, such as choosing

Common mistakes in cybersecurity

A company can make the mistake of focusing solely on the choice of a cybersecurity technology solution. But first of all, it is necessary to identify the organisational needs. Then, the needs of the users must be taken into account. Otherwise, the cybersecurity procedure may fail at the time of implementation.

Organisational needs

For example, there are employees who

 

Continue to read ... This part is protected.

Poursuivre la lecture ... contenu spécial en accès rapide.

only need access to e-mail. This access can be done remotely through a web interface. To do this, there is no need to install a whole secure private network (VPN) with firewalls and antivirus. This configuration would be too cumbersome. The company’s centralized server can perform these tasks with a better price/result ratio. It is sufficient that access to this server is secured by various means of double-checking.

Secondly, a company needs to ensure that the capacity of the corporate servers is sufficient to support many remote connections at the same time. Tests are often carried out at weekends and with little overload – and this does not correspond to the reality on the ground.

Choosing the right“official” tools and centralising data are also essential. For example, a centralised information system (IS) provides a valuable overview for the whole company and its employees. Without this centralisation, employees may be tempted to use software and applications that present a security risk.

In the end, it should be remembered that it is very important to define the needs. It is important to understand not only the company’s needs but also those of the employees. So all the needs. By proceeding in this way, the company may discover aspects of cybersecurity that have been underestimated in the past and, therefore, at risk. It should be borne in mind that choosing an unsuitable solution just because it contains the word “cybersecurity” is never a good choice

User needs

Employees who want to move to remote working are not always aware of the cybersecurity risks. After all, the IT department is still there, on the company premises. But once the work is done outside the premises, the situation changes.

An employee expresses his need in a simplistic way: to have access to the usual tools for his work. And to be able to ask for help from a distance. That is all.

In practice, the company will have to adapt to these needs and design

 

Continue to read ... This part is protected.

Poursuivre la lecture ... contenu spécial en accès rapide.

Cyber security with multiple access points

Sometimes, a few employees have different needs, depending on the location of access.

For example,

 

Continue to read ... This part is protected.

Poursuivre la lecture ... contenu spécial en accès rapide.

?

Conclusions

A company wishing to move towards remote working will need to surround itself with the right partners.

Remote working is not the only solution to ensure business continuity in a crisis, but it can ensure the management of day-to-day operations. The right work processes can reduce cyber security risks and improve access to important information.

Remote working is now a viable alternative. Companies in the

 

Continue to read ... This part is protected.

Poursuivre la lecture ... contenu spécial en accès rapide.

Elena Debbaut is a strategic execution expert to boards and executive teams. She leads and advises on complex transformations when governance barriers, internal politics, or structural fragmentation prevent organizations from executing critical decisions.

Specialities:

• governance-constrained transformation
• operational restructuring
• strategic recovery & execution