TOOLBOX · DOWNLOAD
Safe whenworking fromhome.
At home, much of what is taken for granted in the office is missing: locked rooms, a maintained network, a paper shredder, someone from IT down the hall. At the same time, family members and visitors share the space. This checklist summarizes what the company should settle before the first day of working from home, and what employees should observe regarding their device, home network, workspace, documents, and conversations. It is based on the BSI modules Telework and Home Workplace, the BSI tips for mobile working, and the Austrian rules on telework in § 2h AVRAG (Arbeitsvertragsrechts-Anpassungsgesetz, Austrian Employment Contract Law Adaptation Act).
Free PDF · Checklist
Working Safely from Home: Checklist for Employees and Managers
- Topic
- Security Basics
- Format
- PDF, A4
- Length
- 6 pages
- Size
- 91 KB
- Updated
- Oct 25, 2026
- Sources
- 7
- Usage
- Redistribution in unchanged form permitted
WHO IT IS FOR
Who This
Is for.
Rules for the company, device and access, home network, workspace, documents and conversations, loss and incidents, based on BSI IT-Grundschutz and § 2h AVRAG.
- Employees who work from home regularly or occasionally
- Managers and HR departments that agree on working from home
- IT management and IT service providers that set up and support home workplaces
- Executive management of small and medium-sized companies
6 SECTIONS
What Is
Inside.
- 01
What is different at home
Why working from home needs its own rules and what Austrian employment law requires.
- 02
What the company settles in advance
For executive management, managers, HR, and IT, before the first day of working from home.
- 03
Device and access
For employees: what applies to the laptop and to accessing company data.
- 04
Home network and Wi-Fi
For employees: router and Wi-Fi following the BSI recommendations for private networks.
- 05
Workspace, documents, and conversations
For employees: paper, room, disposal, and confidential conversations at home and on the go.
- 06
Loss, incidents, and support
What you do when a device is missing, something looks suspicious, or the technology fails.
EXCERPT
Home network and Wi-Fi
- Router administration protected with its own secure password, unless the device comes with an individual factory password
- Check the router firmware regularly for updates and install them
- Wi-Fi password with at least 20 random characters
- Default network name replaced so that it reveals nothing about the manufacturer or model
- Remote access to the router turned off if you do not need it
- Guest Wi-Fi for visitors and insecure devices, separate from home office applications
- Open the router configuration only via https; change firewall settings only with expert knowledge
Public Wi-Fi in a café, hotel, or train: Access internal systems only through a secure channel such as the company VPN (BSI).
SOURCES
Supported
by Sources.
- BSI IT-Grundschutz Compendium, module OPS.1.2.4 Telework, Edition 2023 (opens in a new tab)Introduction, OPS.1.2.4.A1, A2, A5, A7, A9
- BSI IT-Grundschutz Compendium, module INF.8 Home Workplace, Edition 2023 (opens in a new tab)Threat landscape 2.2, INF.8.A1 to A5
- BSI cyber security recommendation: Tips for secure mobile working (April 14, 2021) (opens in a new tab)Items 3 to 12
- BSI: Security tips for private and public Wi-Fi (opens in a new tab)Router password, firmware, Wi-Fi password, network name, remote access, guest network, https
- Arbeitsvertragsrechts-Anpassungsgesetz (AVRAG), current version in the RIS (opens in a new tab)§ 2h as amended by BGBl. I No. 110/2024 and entry-into-force provision, version as of October 25, 2026
- BSI: Grundschutz++, milestone plan (as of October 2026) (opens in a new tab)Replacement of the Compendium, publication of the methodology on October 27, 2026
- Regulation (EU) 2016/679 (GDPR), Art. 32 (opens in a new tab)Security of processing
This checklist is a TOMORIS recommendation and must be adapted to your company. The notes on employment law provide an overview and do not replace legal advice; the statutory text in its current version is authoritative.
TOOLBOX
Explore
Further.
- Kostenlos
Password generator (German)
Create passwords and passphrases
Check Now - Kostenlos
Wi-Fi QR code generator (German)
Guest Wi-Fi via QR code, password stays local
Check Now Recognizing phishing
Cheat sheet for employees with warning signs, verification steps, and the reporting channel for suspicious messages.
Learn MorePassword policy
Template for modern password rules with length instead of forced changes, blocklists, MFA, and password managers.
Learn More
SECURITY BASICS
More on
This Topic.
- PDF
Password Policy
Length instead of mandatory special characters, changes only on suspicion, blocklist, and MFA: a password policy to adapt, with an old-versus-new comparison and a checklist for Microsoft Entra ID.
View - PDF
IT Security Policy
Model text with placeholders for the information security policy and eight basic rules for all employees, aligned with BSI IT-Grundschutz, the NISG 2026, and the NISV 2026.
View - PDF
Phishing Cheat Sheet
Warning signs with ways to check them, CEO fraud, QR codes, calls and MFA requests, immediate steps after a click, and the reporting channels in Austria: compact, ready to share and post.
View
YOUR NEXT STEP
From Paper
to Practice.
We review with you what is already implemented in your environment and put the rest into practice: as a project with EXPERTS or as ongoing operations with GRID.