Topic starter
12/06/2026 10:05 pm
TL;DR: Credential misuse, phishing, device mixing, and weak training are driving home office risk more than location, with login credential abuse still behind 80% of breaches and phishing rising by nearly a third during the pandemic, according to Axiad. The lesson is that identity controls, not perimeter assumptions, determine whether remote work stays manageable.
Editorial analysis by NHI Mgmt Group, based on content published by Axiad: “5 Tips to Take Control of Your Home Cybersecurity”.
Key questions
Q: What breaks when employees use the same device for personal browsing and corporate access?
A: The organisation loses the separation that makes identity trust manageable.
Q: Why do remote workers become easier phishing targets?
A: Remote workers are easier to phish because attackers can hide behind urgency, impersonation, and reduced face-to-face verification.
Q: How should security teams reduce credential abuse in home office setups?
A: Security teams should reduce credential abuse by combining multi-factor authentication, unique passwords, and disciplined token or smart card management.
Practitioner guidance
- Enforce device separation for work access Require company-issued devices for work applications wherever possible, and block or heavily restrict access from personal laptops and phones that do not meet managed security standards.
- Strengthen credential governance for remote users Use unique passwords, multi-factor authentication, and clear expiry handling for smart cards or hardware tokens so remote users do not depend on fragile recovery paths.
- Reduce screen and workspace exposure Train employees to lock devices when stepping away and to keep confidential material out of webcam view, shared screens, and visible desk space.
Bottom line: Remote work exposes how quickly identity trust can collapse when user behaviour, device use, and authentication are not governed together.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 6 days ago by NHI Mgmt Group
13/06/2026 12:36 am
Remote work has turned human identity discipline into a primary security control. The article shows that location no longer provides meaningful security by itself because employees now authenticate from home, personal spaces, and mixed-device environments. That means IAM controls, not office perimeter assumptions, now define whether access can be trusted. For practitioners, the governance question is no longer where the user sits but whether the identity event is trustworthy enough to grant access.
A question worth separating out:
Q: How can teams tell whether identity controls are working in a remote workforce?
A: Look for reduced policy workarounds, fewer ad hoc credential requests, and clearer ownership of every access-bearing identity. If employees or administrators are repeatedly improvising around the approved process, the programme is losing authority. Effective controls should lower confusion while keeping access decisions traceable and revocable.
👉 Read our full editorial: Home office security exposes identity risk in remote work
This post was modified 6 days ago by NHI Mgmt Group