Topic starter
11/07/2026 8:30 pm
TL;DR: Remote work has pushed identity digital security from a login problem into a continuous trust problem, with the article highlighting Zero Trust, MFA, UBA, IAM, SSO, and SASE as the main response patterns, according to GlobalSign. The practical takeaway is that access, context, and user behaviour now have to be governed together rather than as separate controls.
Editorial analysis by NHI Mgmt Group, based on content published by GlobalSign: “Identidad digital en la era del trabajo remoto: Una nueva frontera para la ciberseguridad”.
By the numbers:
- 28% of all workdays were remote in the prior year, according to GlobalSign.
- 30% of respondents said they wanted to be fully remote, according to GlobalSign.
Key questions
Q: How should security teams govern access for remote workers without relying on the office perimeter?
A: Security teams should govern remote access with continuous verification, device posture checks, and session-level policy enforcement.
Q: Why do remote work environments increase the value of MFA and SSO?
A: Because users move across many cloud services and unmanaged networks, which multiplies password exposure and inconsistent access checks.
Q: What are the signs that remote access governance is failing in distributed environments?
A: Remote access governance is usually failing when access is fragmented across employees, contractors, and vendors, auditing is limited to basic logs, and no one can confidently identify remote users or their actions.
Practitioner guidance
- Strengthen context-based access policy Use identity, device posture, network context, and application sensitivity together when deciding whether to allow access from remote locations.
- Consolidate authentication into a single IAM flow Reduce credential sprawl by pairing SSO with MFA across the main collaboration and business applications used by remote staff.
- Tune behavioural monitoring for remote work patterns Set UBA baselines for home-office schedules, travel, and contractor usage so that genuine anomalies stand out without overwhelming analysts.
Bottom line: Remote work has shifted identity security away from one-time login verification and toward continuous trust decisions across the session.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/07/2026 8:59 pm
Remote work has made identity governance a continuous control plane, not an authentication event. The old model assumed a user logged in from a relatively stable corporate environment and then stayed inside that trust boundary. That assumption collapses when work happens from homes, cafés, and unmanaged networks, because every access request carries its own risk context. Practitioners should treat access governance, session monitoring, and revocation as part of one operating model.
A question worth separating out:
Q: Should organisations prioritise behavioural analytics or access centralisation first?
A: Access centralisation should come first because you need a consistent policy and entitlement view before behavioural signals can be interpreted reliably. UBA is most useful when it enriches a governed access model rather than compensating for fragmented IAM.
👉 Read our full editorial: Remote work identity security is forcing stronger IAM controls