Secure remote working on public networks. VPN, data protection, physical security: discover best practices for working securely in Switzerland.
The modern workplace goes far beyond traditional cubicles and open spaces
Since remote work became widespread during the COVID and post-COVID period, employees now work from their homes, libraries, busy cafés, or even from their vacation destinations. These environments—often referred to as “third places”—offer flexibility and comfort, but they also introduce new risks for corporate IT systems.
With remote work becoming a lasting reality, organizations must adapt their security policies. A café cannot be considered a secure office: its open environment exposes employees to very different threats. Teams need clear guidelines to work safely and protect sensitive data.
Neglecting security on public Wi-Fi networks can have serious consequences, as these locations are prime targets for cybercriminals seeking to exploit remote workers. Provide your teams with the right tools, best practices, and a solid policy to protect your data—even outside the corporate network.
The dangers of open networks
Free internet access attracts many remote workers to cafés, shopping centers, libraries, and coworking spaces. However, these networks are rarely encrypted or properly secured. Even when a password is required, it is often widely shared, which significantly reduces the level of protection.
As a result, it becomes easy for attackers to intercept traffic and retrieve passwords, emails, or documents in just a few seconds.
Some attacks also rely on fraudulent networks deliberately named “Free Wi-Fi” or using the name of a nearby business. Once connected, the attacker controlling the network can see all transmitted data—a classic man-in-the-middle attack scenario.
It is therefore essential to remind employees that they should never trust a public network. Caution must remain the rule, even when the network is “protected” by a password.
Making VPN usage mandatory
The most effective tool for securing remote work is a VPN.
A Virtual Private Network encrypts all data leaving the computer, creating a secure tunnel through the internet—even on an untrusted public network. The information then becomes unreadable to anyone attempting to intercept it.
The VPN should be provided by the company, and its use should be mandatory whenever employees connect outside the office. To ensure adoption, choose a tool that is simple, fast, and automated. When possible, configure the VPN to connect automatically, without user intervention.
Finally, implement technical controls that prevent access to internal resources unless the VPN is active.
The risk of visual hacking
Cyber threats are not the only risks to consider. In public spaces, someone sitting nearby can easily glance at a screen. Visual hacking involves stealing information simply by looking over someone’s shoulder—a discreet, highly effective method that is almost impossible to detect.
In crowded environments, sensitive data—customer information, financial tables, internal projects—can be seen or even photographed without the employee’s knowledge.
To reduce this risk, provide privacy screens. These filters make the screen unreadable from the side. Some devices even include built-in hardware privacy systems that limit visibility based on viewing angle.
Physically securing devices
Leaving a computer unattended is a costly mistake.
In a secure office, stepping away for a few minutes is common. In a café, it can lead to device theft in seconds.
Your remote work policy must clearly emphasize the importance of physical device security.
Employees should:
keep their computer with them at all times;
never entrust it to a stranger;
remain vigilant and assess their surroundings.
Also encourage the use of security cables, especially in coworking spaces. While not foolproof, they provide an additional deterrent.
Managing sensitive calls and conversations
Cafés may be noisy, but conversations are often still audible. Discussing confidential matters in public is risky—you never know who is nearby.
A competitor, a fraudster, or a curious bystander could overhear sensitive information.
Recommend that teams avoid confidential conversations in third places. If a call is unavoidable, it is better to isolate oneself, step outside, or move to a private space such as a car.
Headphones only protect what the employee hears—not what they say.
Developing a clear remote work policy
Employees should never have to guess the rules.
A written policy clearly defines expectations, standards, and procedures.
Include dedicated sections on:
public networks and their use;
physical security measures;
best practices for data protection.
Explain the reasoning behind each rule to encourage compliance. The policy should also be easily accessible, for example via the intranet.
Review this document once a year. Technology evolves quickly, and your policy must evolve with it.
Empowering your teams to work securely
Working from a third place offers flexibility and motivation, but it requires increased vigilance.
Security on public networks and physical protection of devices are non-negotiable. With the right tools, clear guidelines, and a solid policy, you can reduce risks while benefiting from remote work.
Well-informed employees become your first line of defense—wherever they are.
Is your team working remotely without real protection?
We help companies strengthen the security of remote access and develop tailored policies so your data remains private—even on a public network. Contact us today to secure your remote work.