Know the Technology Involved

The first technology layer of a secure telecommuting plan is the VPN (virtual private network) that will provide encryption between the employee working at home on their own connection and your office's internal network. VIPdesk uses two-factor authentication for added network security. (One-factor authentication requires only a user name and password, and doesn't offer a high level of security.)

A network access control device, or NAC device, is another important piece to consider. A NAC will query each machine--before it's granted access to the network—to check whether certain software, such as an antivirus utility, is installed. When a user logs in, the NAC can even ensure that the user has a firewall set up and that patches are up-to-date. If the set criteria are not met, that user's computer will not be allowed on the network.

If your company stores credit card information or other data, consider installing a third-party application on company PCs that can disable external USB devices when a user is logged in to your office network via VPN. This arrangement protects your sensitive data and prevents a remote employee from downloading client data. If the software detects the presence of an external USB device, such as a thumb drive, it will terminate the connection. (VIPdesk uses Secure It Easy.)

Keep a Watchful Eye

While you don't necessarily need to watch an employee's every mouse click, it's a good idea to set ground rules and make sure that staffers aren't catching up on Oprah or heading out to a baseball game during work hours.

Brian Diamond, founder of Telecommuting360, a Web site and open forum dedicated to educating people about telecommuting, advises managers to be transparent about watching employees. He notes that most remote office and telecommuting packages have auditing built in. Citrix, for example, offers logging on its XenDesktop product so that a manager can receive a log of an employee's entire day, including chat sessions, e-mail messages sent, and IP-telephony calls.

State laws vary, however, and some require employers to inform employees that they may be monitored, so be sure to check your state's laws before proceeding. Draft a policy stating that the employer may monitor the employee, says Diamond, and have each employee sign it. Then, send out a monthly reminder. If employees know that they may be monitored, Diamond says, it can be good motivation not to slack off.

"If you don't watch what [remote employees] are doing, you see a drop-off in work productivity over time," he warns.