Teleworkers need to perform tasks at home with the same efficiency they enjoy in the office. To fulfill this need, a well structured teleworking infrastructure, providing employees with standardized equipment and secure access to all the resources required by their roles is necessary. Typically, there is high variability in the cost per teleworker, this is due to each employee's different service and technology needs, there are however some basic infrastructure requirements:

" Broadband Internet Access

" Virtual Private Networks

" Teleworking Equipment

" Security Software


Broadband Internet Access

Given the requirements of today's applications, broadband access speeds are a requirement for teleworkers. Fortunately, broadband Internet service is widely available today and most teleworkers have access to residential DSL or cable services. For exceptional cases where these services are not available, there are satellite-based solutions. The company teleworking agreement should explain whether the home broadband Internet access will be paid for by the employee, the company, or subsidized by the company. Each of these payment structures can be effective depending on the situation.


Virtual Private Networks

Virtual Private Networks (VPN) allow users to securely share and access files and applications on their companies' networks. There are different types of VPN solutions available:

" IPSec, PPTP, and SSL VPN- suitable for teleworkers that work from home.

" Mobile VPN- ideal for teleworkers that are constantly mobile and need to move seamlessly from one network to another.

In the past, IPSec and PPTP VPNs were the best teleworking options. However, SSL VPN is being increasingly adopted since it provides the best security and the easiest administration of all the VPN solutions. SSL VPN is clientless; therefore, it does not require the installation of client software on the end user device. Teleworkers can simply access the company network through any secure browser connection. In order for users to gain access to the company network, they are simply added to the appropriate group, with the appropriate application, device, and file sharing access. All SSL VPN solutions offer secure access to the company network by using data encryption and user authentication. SSL VPN also allows IT to regulate endpoint security; only devices with the appropriate security software and updates can access the company network.

For companies that do not have the resources to set up and manage a VPN, managed IPSec VPN solutions do exist. Companies like MegaPath, offer VPN solutions to companies; they supply teleworkers with the necessary tools to allow them to access their companies' networks. With managed VPN solutions, the provider typically provisions teleworkers with the following:

" Broadband Internet connection.

" Account set up and management.

" IT support.

" Firewall and anti-virus enforcement.


Equipment

A major teleworking decision is whether or not teleworkers should be permitted to work from their personal computers or issued a company machine. While it is appealing to have employees use their own equipment, it can result in problems such as higher IT support costs and security issues, since IT has no control over an employee's personal computer. While there is a cost to provide teleworkers with company issued equipment, the benefits are many and include:

" Effective application and enforcement of security policies. These include password enforcement, software updates, and maintenance.

" Software and applications are standardized and approved by the company. The consistency of programs across the organization makes it easier for IT to support all employees.


Security Software

Protecting company data stored on the laptop is paramount. All computers issued to teleworkers must have appropriate anti-virus software, firewalls and data encryption programs installed, all of which are centrally managed by the company's IT department. In the Computer Security Institute (CSI) 2007 CSI Computer Crime and Security Survey, the percent of companies having laptops and other mobile devices stolen was 50%, up from 47% in the previous year. Since the loss or theft of a company laptop represents a huge risk, laptop encryption is especially important to protect sensitive data. For more insight into laptop theft, refer to the McLean Report research note, "Enough With the Stolen Laptops Already!


Recommendations

1. Establish Internet guidelines in the teleworker policy. Broadband Internet access is a necessity; state who is responsible for paying it in the teleworking policy. For a sample telework policy template, refer to the McLean Report "Telework Policy and Agreement.

2. SSL VPN is the best choice for home office teleworkers. SSL VPN is the best choice since it allows higher levels of security, restricted access to the company network, and endpoint security. If the company already has an existing IPSec or PPTP VPN that is effective and secure then there is no need to immediately replace it with a SSL VPN, it should be replaced when the need arises.

3. Teleworkers should use standardized company equipment. Standardization makes it easier for IT to provide technical support and reduce security risks.

4. Security is paramount. Ensure data kept on the teleworkers' computers and the company's network is secure with appropriate anti-virus software, firewalls, and data encryption software.


Bottom Line

Companies need to define their basic teleworking requirements and make sure they are adhered to. To improve the effectiveness of IT support for teleworkers, companies should standardize the equipment and software they use.