What type of consumer security obligations does a mortgage loan originator who works from home have?

The mortgage loan originator (MLO) must follow the information security program of their employer/sponsor. In addition, the MLO must be able to access their company’s secure platform(s) (including a cloud-based system) directly from a remote device (laptop, phone, desktop computer, tablet, etc.) using a virtual private network (VPN) or similar system that requires passwords or other forms of authentication to access. All security updates, patches or other secure alterations to devices must be maintained.