Threat Model of a Remote Worker

This blog-style threat model for remote workers describes seven steps for threat modeling, identifies five threat actor categories and six common remote-work threats (phishing, credential theft, data leakage, DoS, lost devices, software-exploit access), and recommends six security controls—advanced EDR, always-on VPN, stronger IAM/MFA, email/URL protections, endpoint hygiene, and user security awareness—to reduce risk.