Last updated: 7 November 2026
Secure remote working rests on four things: MFA on every account, managed and updated devices, a separate guest Wi-Fi network that cannot reach company systems, and either a VPN or, better, Conditional Access that checks the user and device before granting access to cloud apps. Public Wi-Fi is safe enough when these are in place.
Three situations, three fixes
| Situation | Risk | Control |
|---|---|---|
| Staff working from home | Unmanaged devices and weak home routers | Managed devices, MFA, updates, EDR |
| Guest Wi-Fi in your office | Visitors reaching company devices and files | Separate guest network, isolated from the company network |
| Staff on public Wi-Fi | Snooping and fake hotspots | HTTPS everywhere, MFA, VPN or mobile data where needed |
| Accessing on-site systems remotely | Exposed remote desktop and weak VPN logins | VPN with MFA, never open remote desktop to the internet |
MFA first
The single biggest protection for any remote access.
Managed devices
Only healthy, updated devices reach company data.
Network separation
Guest, staff and device traffic kept apart on the Wi-Fi.
Monitoring
Unusual sign-ins and devices flagged and investigated.
VPN or Zero Trust?
A VPN suits access to on-site servers. For Microsoft 365 and other cloud apps, Conditional Access checks the person and the device each time and is usually simpler and safer than a VPN alone. Read What is Zero Trust?
How ABCOM helps
We design the Wi-Fi, VPN and Microsoft 365 access rules together. See What is a VPN? and Public Wi-Fi safety for business travellers.
Quick answers
Do we need a VPN for staff working from home?
Only if they need to reach on-site servers. For cloud apps like Microsoft 365, MFA and Conditional Access on managed devices usually give better protection with less hassle.
How should guest Wi-Fi be set up?
On its own separate network with no route to company systems, with a different password to the staff network, changed regularly or via a time-limited voucher.
Want your guest Wi-Fi and remote access reviewed? We can check it for free.
Related answers and guides
- What is a VPN?
- Public Wi-Fi safety for business travellers
- What is Zero Trust?
- What is mobile device management?
- What is MFA?
- All ABCOM FAQs
Sources and further reading
Related questions
Want this sorted for you?
Talk to our Burgess Hill team about cyber security services. Free, friendly and no obligation.