The security and confidentiality of a company’s data is paramount. As businesses grapple with the COVID-19 pandemic and the need for employees to work remotely, it is important to remain focused on ensuring the security and confidentiality of a company’s data, especially personal or financial information of individuals. A breach of confidentiality may impact a company’s customers or employers and can even impact the viability of the company’s business itself. With that in mind, here are 10 security reminders for employees working from home:

1. Use only company-approved devices unless exceptions are approved by IT. If you must use personal devices, including mobile phones, ensure that your software is up to date.
2. Refrain from using your work computer/devices for personal matters and do not let family members (including children) or others use your work computer/devices.
3. Refrain from copying or sending confidential data to personal email accounts or personal computers, and refrain from sending confidential data through text message.
4. Ensure that your passwords are unique, complex, and long, and use multi-factor authentication whenever possible.
5. Ensure that your home wifi network is password protected and encrypted and avoid using publicly available wifi networks unless you are connected using a virtual private network (VPN).
6. Ensure that work is conducted in a location that allows for confidential communication.
7. Lock your computer or other devices when not in use.
8. Encrypt any sensitive data where possible.
9. Be especially mindful to whom you are sending emails and attachments to ensure that only intended documents are sent and that they are sent only to the intended recipient.
10. Be especially careful about phishing emails – hackers are very active during times of increased tension. Hackers pose as colleagues, clients, or other trusted parties, or use recent news headlines as an excuse to encourage you to click on links, open infected attachments, or provide your user credentials (usernames and passwords).

If you suspect that there may have been a privacy or security breach or if you think you may have been fooled by a phishing attack, contact your IT department immediately. Breaches are far less damaging if they are addressed immediately.