COVID-19: Evaluating Security Implications of the Decisions Made to Enable a Remote Workforce

Daniel Wood shares seven steps for securing a suddenly remote workforce during COVID-19: encrypt email, mandate VPN and MFA, harden endpoints, centralize device management, and back up data.

Covers the security side of mass remote work: phishing-aware user training, hardened workstation baseline images, patch tracking, and the host-based attack surface that grows as employees go mobile.

A HackerOne survey of 1,400 CISOs, CTOs, and CIOs found 30% saw more attacks during COVID-19, 64% believed the pandemic raised breach risk, and 66% felt pressure to prove security commitment.

Advice for companies hiring remote developers: be upfront about long-term remote plans, assess candidates' self-direction, and understand how their work routines fit distributed teams.

Remote teams offer focus and flexibility but pose unique management challenges. The article lists ten common mistakes, from assuming office talent translates to remote work to neglecting culture.

HackerOne shares employee wellbeing programs adopted during COVID-19, including Hack-COVID response teams, Wellness Wednesdays ending at 2pm, and daily mindfulness and stress-reduction activities.