Securing the remote workforce: Zero Trust applied to BYOD, VPN, and cloud access

This report outlines how remote work expands the enterprise attack surface across BYOD devices, VPNs, web portals, cloud services, and RDP, and details common threat actor TTPs such as phishing, AitM/MFA fatigue, and exploitation of unpatched remote services. It recommends a Zero Trust approach—combining strict access control (MFA, keys, contextual checks), least-privilege and continuous monitoring, secure web gateways, and end-to-end encryption—while weighing usability and operational trade-offs, to reduce risk without sacrificing productivity.