I hope you’re
well. I understand some usersi will be using their personal computers
for work. This presents serious security concerns in terms of safeguarding your
company’s data and your customers’ data.
We recommend that you do not allow users to do this, as it undermines the efforts you are paying us for to keep your data and your company secure. IT may also violate your cybersecurity insurance policy. (You'd need to discuss that with your insurance agent.)
[OPTIONAL] If users must user their home computers, we should set up a VPN so they can safely tunnel into work sites.
I urge you to
take these steps in order to protect against issues that may arise if machines are
not receiving patch management services and managed anti-virus.
[Particularly
with users working from home, it’s difficult to know who has access to the
machines and what mayhem may result, even if accidentally.]
Alternatively,
it is probably more cost-effective and safer to simply purchase company machines for these users.