# MA-780.032020: MyCERT Advisory - Work-From-Home : Security Advice & Best Practices

**Date:** 21 Mar 2020  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-780.032020  
**Advisory ID:** MA-780.032020

---

**1.0 Introduction**
With the ongoing pandemic of Coronavirus Disease (COVID-19), many organization has deployed Work-From Home (WFH) process to ensure continuity of businesses and operations. While the process may reduce the capacity of the virus transmission through acts of social distancing, it may inadvertently heighten cyber risks associated with data and services of organizations remotely accessed by employees
**2.0 Impact / Risks**
Cybersecurity risks can happen if telecommuting not been done securely. For example, incident 
**3.0 Mitigations and Best Practices**
MyCERT encourages organizations and individuals to adhere to the following best practices to reduce cyber risks associated with remote/telecommuting process:
- Ensure all systems including *Virtual Private Network* (VPN), network infrastructure devices and devices being used to remote into work environments adequately updated with the latest patch and secure systems configuration.
- Alert employees to an expected increase in *phishing* attempts. Additionally, MyCERT has released an advisory regarding the matter. You may review the announcement at the link below:
<https://www.mycert.org.my/portal/advisory?id=MA-779.032020>
- For individual users, kindly refrain from logging in to your work environment using public internet Wi-Fi. Connect either through your home or mobile network data.
- Ensure passwords to systems are updated, validated and secure. Where applicable, organizations may also implement *Multi Factor Authentication* (MFA) to ensure robust and reliable system access.
- Be on the look out for suspicious activities. Cybercriminals tend to take advantage of global events and issues to conduct malicious activities targetting users and organizations. Individuals are encouraged to report any suspicious behaviours to their respective IT Department. Additionally, you may also lodge a report to MyCERT through our Cyber999 service.
For additional enquiries and information, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888 
Business Hours: Mon - Fri 09:00 -18:00 MYT
Cyber999 App: Download at App Store (IOS) / Google Play (Android)
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**4.0  References**
1. <https://www.us-cert.gov/ncas/alerts/aa20-073a>
2. <https://www.cert.govt.nz/individuals/guides/stepping-up-your-cyber-security/working-remotely/>
3. <https://www.sans.org/security-awareness-training/sans-security-awareness-work-home-deployment-kit>