Now that the weather is getting hotter, many workers may be thinking about spending some time away from their desk. You may be more inclined to go to a conference in Barcelona or take a family trip, but keep your work phone with you.
Whether you’re flying or enjoying a vacation closer to home, taking your business outside your regular workplace brings a new set of security risks. These include unsecured Wi-Fi networks, infected public charging ports, and Bluetooth attacks.
So if you're heading on vacation this summer with a laptop in hand, TechRepublic spoke to experts to learn the top tips for keeping your digital devices and business data safe.
SEE: Essential Travel Tips for Business Professionals from TechRepublic Premium
1. Before traveling, consult with the company's security service.
Tim Rawlins, senior consultant and director of security at NCC Group, noted that it's important to consult with your company's security team before traveling with work devices to ensure you're up to date on all policies and processes.
“Working abroad is not always permitted; there may be visa issues or security restrictions like geo-blocking and data sovereignty issues that you may not have considered,” he told TechRepublic.
“Stay informed about the local situation and be aware of common scams and threats in the region you are visiting. Report any suspicious activity or potential security breaches immediately to your organization's IT or security department.”
2. Do not use public Wi-Fi networks.
Martin Lee, head of EMEA at cybersecurity company Cisco Talos, told TechRepublic in an email: “It’s always tempting to save on data roaming and allowances by connecting to public networks or WiFi. However, it may be worth considering paying extra to keep your data safe.”
“Shared public networks may be shared with unsavory individuals, or an apparently free network may be a malicious honeypot network designed to deceive the unwary. A criminal spying on the network may steal cookies or session tokens to gain access to your sensitive services.
“Alternatively, an attacker could create a man-in-the-middle attack to impersonate the key system, intercepting and modifying data.”
3. Use a VPN
VPNs can be used on phones connected to local cellular networks abroad, as well as on laptops. Trevor Horwitz, founder and chief information security officer at TrustNet, told TechRepublic in an email: “By encrypting your data before it leaves your device, a VPN ensures that any intercepted data remains unreadable.
“Another benefit of a VPN is the ability to hide your location by assigning you a new IP address. This helps bypass any restrictions your Wi-Fi provider may have and increases your anonymity online.”
SEE: 5 Best VPNs for Travel in 2024 (Free and Paid VPNs)
4. Keep devices out of sight while traveling.
“When traveling, keep devices securely out of sight,” Lee said. “Be aware of your surroundings when using devices, as thieves are adept at stealing devices in busy areas and sneaking them away when attention is elsewhere.”
Rawlins said to be especially vigilant when using a maps app on your phone to get directions. “Phones are often snatched on the street by criminals on e-bikes or when the doors of public transportation are about to close,” he wrote in an email to TechRepublic.
5. Use dedicated work devices or virtual desktop solutions.
Horwitz told TechRepublic that frequent travelers should consider using a dedicated work device that stores only the data and capabilities needed for their trip. “This strategy improves security by isolating travel activities from primary devices, allowing for stronger security measures and reduced risk,” he said.
“Before and after your trip, clean up your designated devices and restore them to a clean state. Finally, be sure to review and analyze any suspicious activity that may have occurred during your trips.”
Any data stored on a work device should be encrypted and backed up. Horwitz said it's best to store backups in the cloud rather than on an external drive so you can access a copy when you're away from home if needed, and so it's automatically updated.
Alternatively, consider using a virtual desktop solution that connects remotely to a device in the office. Horwitz said, “All the information and files they use are stored in a virtual environment, not on the local device. If the device is stolen, there should be no data to access.”
6. Safe working devices
Keeping the devices you take with you safe starts with their built-in security settings and antivirus software.
Rawlins told TechRepublic: “Secure your devices with strong, unique passwords and enable biometric security features where possible. Also, update your software, especially your operating system, to the latest version available.
“Turn on two-factor authentication for all your accounts, especially the email where password reset emails are sent, but use an authenticator app rather than text messages or emails sent to your phone.”
Andrew Langsden, a security consultant at Forge Secure, added in an email: “Reducing the number of login attempts before an account is locked can also prevent someone from guessing the wrong password.”
He also recommended using personal firewalls that monitor and filter incoming and outgoing network traffic. “This will ensure that you reduce the number of connections your laptop can provide to an untrusted WiFi network and help reduce the likelihood that your device will become a potential target,” Langsden said.
7. Use the privacy screen
Langsden said: “If you're working on projects that involve customer information or any sensitive data, having someone sitting next to you looking at your screen can be a problem.
“You can reduce this risk by using privacy screens for your laptop or mobile device. These are protective films that hide your screen from anyone not looking directly at it, and can add a little extra protection to your business data.”
8. Disable USB ports.
Langsden said: “The USB ports on your device may be disabled. It only takes a few seconds for a USB device to be connected to your laptop, the program will automatically run and your device will be compromised. There is also a good chance that you will not need the USB ports while traveling.
“If you turn them off before you travel, it will help eliminate the potential risk.”
9. Set up device lock and remote wipe capabilities.
A thief is more likely to steal your work device when you are traveling with it, and it may be unlocked during this time. So be sure to adjust your lock settings.
Langsden said: “You can set a short lockout time and also ensure that the account is locked when you close your laptop. This can reduce the chances of your account being accessed.”
He added that remote lock and wipe capabilities could be useful in the event of theft, as they could help ensure data security. “Many device management systems offer these features,” Langsden said.
10. Be careful with rented accommodation
Lee said: “When booking accommodation, double check that the booking site is genuine and not a cloned site that will charge you but will not provide a valid, recognised booking. Never agree to pay for accommodation outside of the official booking engine, you will have no way to get a refund if the booking turns out to be fraudulent.”
When living in a rental property, it is important not to leave valuables or devices unsecured, even in a locked room. “Room keys could be cloned or stolen,” Lee said.
At the end of your stay, it’s important to sign out of any devices, such as smart TVs, and not save any login information. “Otherwise, subsequent guests will be able to access your accounts,” Lee added.