Left to their own devices: Security for employees using personal devices for work

This article outlines best practices for securing employee-owned devices in remote and hybrid work, recommending measures to reduce attack surface and protect corporate data: inventory and enforce security standards on all devices (via MDM), keep OS and applications patched, use VPN and properly configured RDP, encrypt data in transit and at rest, require MFA, apply secure videoconferencing settings, deploy reputable multilayered security software, maintain and test backups, and provide security awareness training.