Story 08 · Vigilance
8Security for Freelance and Remote Work

As technology evolved and creative people relied more on freelance and remote work, there was a pressing need to face the security challenges these shifts brought. Fawzooz began by understanding the risks and applying suitable measures to protect data and creative work.
Understanding the risks
“Every home has become an office, and every office needs a door that closes.”
Insecure networks. Creatives relied on home Wi-Fi and public networks that might lack proper security, exposing data to interception.
Device theft and loss. Personal devices used for work are vulnerable to theft or loss, risking data leaks.
Lack of access control. Without company IT oversight, it becomes hard to ensure only authorised users can reach sensitive data.
Phishing and social engineering. Remote workers are increasingly targeted by attacks aiming to steal credentials or install malware.
Applying effective security measures
Developing a comprehensive security policy
Fawzooz set out a clear security policy for remote workers to follow, covering:
Security procedures for devices and networks.
Guidelines for managing passwords, multi-factor authentication and passkeys.
Procedures for sharing and storing information securely.
Steps to follow in the event of a security breach.
Securing networks
Using a VPN. Workers should use a virtual private network (VPN) to reach work resources, encrypting internet traffic and protecting data from unauthorised interception.
Securing home Wi-Fi. Guiding workers to change default router settings, use strong passwords, and update router software regularly to protect against vulnerabilities.
Strengthening device security
Endpoint protection. Installing reputable antivirus and anti-malware software, and updating it regularly to defend against new threats.
Physical security. Using cable locks, storing devices safely when not in use, and never leaving devices unattended in public places.
Encryption. Enabling full-disk encryption on all devices to protect data in case of theft or loss.
Using cloud security to protect data
Data encryption. Using cloud services that offer end-to-end encryption, both in transit and at rest.
Access control. Applying strict access controls with role-based permissions so only authorised individuals can reach sensitive data.
Regular backups. Using cloud backup solutions to back up data automatically and protect it from loss due to device failure or accidental deletion.
Secure collaboration tools. Choosing collaboration platforms with enhanced security features, so file sharing and communication are protected.
Awareness and training
Regular security training. Holding regular training sessions on security best practices, emerging threats and safe online habits.
Phishing awareness. Educating workers about the dangers of phishing and how to recognise suspicious emails and messages.
Adapting to new technologies
Keeping up with security technology. Urging remote workers to stay informed about the latest security tools and practices, and encouraging them to adopt new technologies that strengthen security, such as biometric authentication and advanced threat-detection systems.
By applying these measures, Fawzooz was able to protect his data and creative work effectively, letting remote workers and freelancers enjoy flexibility without sacrificing the safety and confidentiality of their data.
Share your answer
Write down three digital things that matter to you: a file, an account, or photos. How do you protect each of them today? And what step will you add this week?
Tip: use ← → to move between sections.

