Skip to main content

What type of consumer security obligation does a licensee/registrant have if it allows its employees/agents to work from home?

A licensee/registrant must ensure all of its employees/agents follow its information security program. In addition, individuals representing a licensee/registrant while working remotely must be able to access their company’s secure platform(s) (including a cloud-based system) directly from a remote device (laptop, phone, desktop computer, tablet, etc.) using a virtual private network (VPN) or similar system that requires passwords or other forms of authentication to access. All security updates, patches or other secure alterations to devices must be maintained.