Cyber Security for Employees Required to Work from Home

一个项目，旨在解决从非托管设备（如PC和平板电脑）访问文件和数据库等公司资源时的安全风险。在冠状病毒紧急情况下，许多组织都让员工在家工作。虽然VPN和云存储消除了许多风险，但它们引入了其他风险，最重要的是现在用于访问公司资源的设备不是由公司拥有或管理的，并且很难确定它们是否已正确修补，是否有防病毒软件并满足最低安全规范。这些设备还可能使用与其他用户（家庭成员、合作伙伴等）共享的网络。他们可能不关心安全问题。家庭网络还可能包括多个具有最低安全性或没有安全性的“物联网”设备实例。我们的项目旨在通过提供一种机制来解决这个问题，以保护公司资源免受危险配置的机器的侵害，同时尊重家庭用户和同一网络上的其他人和设备的隐私要求。虽然主要集中在安全要求的设备，我们正在准备可以帮助家庭用户，以最大限度地提高他们的资源，通过分析他们的宽带连接的可靠性和流量的无线连接。从长远来看，我们设想更多的组织可能会要求他们的员工在家工作，我们的项目旨在通过将公司技术管理扩展到他们的家中，使维护安全和优化生产力变得容易，而不需要损害用户隐私。

A project to address the security risk to company resources such as files and databases when accessed from unmanaged devices, such as PCs and tablets. During the Coronavirus emergency many organisations are keeping going by having their staff work from home. While VPNs and Cloud storage eliminate many risks they introduce others, the most important being that the devices now being used to access company resources are not owned or managed by the company and it is very difficult to determine if they have been properly patched, have anti-virus software and meet minimum security specifications. The devices are also likely to use networks shared with other users (family members, partners etc.) who may be unconcerned with security. The home network is also likely to include multiple instances of 'Internet of Things' devices with minimal or no security. Our project aims to address this issue by providing a mechanism to protect company resources from dangerously configured machines while at the same time respecting the privacy requirements of the home user and other people and devices on the same network. While primarily focused on security requirement the device we are preparing can help the home user to maximise their resources by analysing both the reliability of their broadband connection and the volume of traffic on their wireless connection. In the longer term, we envisage that more organisations are likely to ask their staff to work from home and our project aims to make it easy to maintain security and optimise productivity, without the need to compromise user privacy by extending company technical management into their homes.