“Working from Home” and two basic needs as a business continuity requirement.

Person working from home

Whether the reason is the need for business continuity against the Corona Virus we live in today, or to create space in the office and employ more people, being able to work from home is a necessity for modern companies.

What is required for employees to do their jobs from home? First of all, you should be in a business that can be done on a computer and does not require a counter or special conditions for production. If we put this requirement aside, we can say that the following 2 basic conditions are needed in order to work from home;


“Self Discipline” that employees and managers most need to be able to work from home. Just like going to work, I mean waking up at 8 in the morning, completing breakfast and personal preparations until 8.45, and being at work at 9:00 with a suitable outfit. A lunch break from 12:30 to 13:30, a break at 18:00, maybe a few tea / coffee and snack breaks in between. But what's the difference between this and working in the office? I can hear you say, you're right, working from home is theoretically no different from working from an office. I can even say that it is more difficult, because you will also need a quiet room, family members who are old and mature enough to not interrupt your studies, a good internet connection. If these conditions are not met at home, it may be a solution to go to a nearby cafe on a normal day (if we are not under the threat of virus as today). With this approach, the only benefit of working from home may be not to bear the traffic going to and from work, and of course still maintaining business continuity ...


The technical infrastructure that the employer must provide for the employee to work from home. If the technical infrastructure facilities in your company are not at a level that will enable the employees to securely verify their identities and obtain the necessary access authorizations, working from home may cause many problems due to the security gaps that may occur. The "Zero Trust" level security approach, called "Zero Trust Security", is the most common framework in this regard. Google is also using this approach, ideally there should be no difference other than speed between working from the corporate headquarters and from Starbucks around the corner. So what are these technical infrastructure requirements;


Multi-Factor Authentication (MFA): Using methods such as SMS, push notifications (sending notifications via the application) to verify that the user at the computer is your employee and the right person.

Single Sign On / Central Login (Single Sign On, SSO): The user can use all applications with a single secure login instead of logging in to each application separately.


Privileged Access Management (PAM): Providing the access of the user only to the areas where he / she is authorized, preventing him from getting too much authorization centrally.


Virtual Tunneling Network (VPN): Providing the user to access company applications through an end-to-end encrypted and secure virtual tunnel. Restricting the possibility of outside intervention in end-to-end communication.


Session Recording: Recording all transactions made for critical applications and transactions visually or digitally, and querying them retrospectively when necessary.


In summary, in cases where the above conditions are not met, it is useful to reevaluate the measure of working from home. If working from home will come to the fore as a business continuity requirement, it is important to set up the necessary infrastructures when everything is in order, encourage employees to work from home a few days a week or a month, and make sure that everything will go well when necessary.


Note: This article was written by working from home in a world that has been declared as a pandemic due to the Covid 19 Virus


#informationsecurity #workfromhome #Saaspass

Featured Posts