Hybrid working is now the default for a large proportion of UK office-based staff. But many organisations built their remote working capability quickly and under pressure, and what was adequate as an emergency measure may not be fit for purpose as a permanent arrangement. This guide covers the IT foundations that hybrid working requires, and the gaps that are most commonly left unaddressed.

What "Hybrid Working IT" Actually Means

Hybrid working IT isn't a single product, it's a collection of capabilities that together allow staff to work productively, securely, and collaboratively from any location. The core components are:

• Reliable endpoint devices: laptops capable of handling video conferencing, collaboration tools, and the full range of business applications without performance issues
• Secure remote access: the ability to reach business systems, files, and applications without being on the office network
• Collaboration tools: platforms for communication, document sharing, and project management that work as well at home as in the office
• Identity and access management: secure, consistent control over who can access what, regardless of where they're working from
• Support for remote workers: IT helpdesk capability that can resolve problems for staff who aren't in the office

The Device Foundation: Getting Hardware Right

Everything else in a hybrid setup depends on the device. A laptop that struggles with Microsoft Teams or takes ten minutes to apply updates before a meeting is a productivity problem that no amount of cloud infrastructure can compensate for.

Key device requirements for hybrid workers:

• A minimum of 16GB RAM for most knowledge workers using multiple applications simultaneously
• Solid-state storage (SSD), not spinning disk, for acceptable performance under load
• A reliable built-in webcam and microphone, or a clear policy on USB peripherals
• Battery life sufficient for a full working day without access to a charger
• A lightweight chassis if staff are regularly carrying devices between home and office

Device specification that was adequate for occasional home working may fall short when it's the primary working pattern five days a week.

Secure Remote Access: VPN vs Zero Trust

For many UK organisations, the default approach to remote access has been a VPN, a virtual private network that extends the corporate network to remote devices. VPNs work, but they have limitations as hybrid working scales:

• VPN clients can be unreliable on consumer broadband connections and cause performance complaints
• Once a device is on the VPN, it has broad network access, which creates risk if the device is compromised
• Managing VPN capacity can become a challenge when a large proportion of the workforce is remote simultaneously

A growing number of organisations are moving towards a Zero Trust architecture, a model where access to each application or resource is granted individually, based on verified identity and device compliance, rather than assuming anything on the network is trusted. This approach works well for cloud-first organisations and reduces the blast radius of a compromised device.

For smaller organisations, a well-configured VPN with multi-factor authentication remains a practical and cost-effective solution. The key is that it should be configured properly, not left on default settings.

Multi-Factor Authentication: Non-Negotiable

If your organisation's remote access, email, cloud applications, VPN, is protected only by a username and password, you have a significant and straightforward-to-fix security gap. Compromised credentials are the most common initial vector for business email compromise and ransomware attacks.

Multi-factor authentication (MFA) requires a second factor, typically a push notification to a smartphone app, a text message, or a hardware token, in addition to the password. Enabling MFA on all remote access points is one of the highest-value, lowest-cost security improvements a business can make.

Most cloud platforms (Microsoft 365, Google Workspace) include MFA capability in standard licences. Enabling it is primarily a policy and change management exercise, not a technical one.

Mobile Device Management for a Dispersed Workforce

When devices are used outside the office network, IT loses some of its traditional visibility and control. Mobile device management (MDM) platforms, such as Microsoft Intune, restore that visibility by giving IT the ability to:

• Enforce security policies (screen lock, encryption, approved applications) on enrolled devices
• Push software updates and patches remotely
• Remotely wipe a device that has been lost or stolen
• Check device compliance before granting access to corporate resources
• Separate corporate data from personal data on BYOD (bring your own device) devices

MDM is no longer an enterprise-only tool, it scales well to businesses of 20-200 employees and is increasingly expected as a baseline security control.

Collaboration Tools: Standardising on a Platform

Many organisations ended up with a patchwork of collaboration tools, Teams for some things, WhatsApp groups for others, email for the rest. This creates information silos, security risks (personal messaging apps carrying business data), and confusion about where to find things.

Standardising on a single collaboration platform, typically Microsoft Teams or Google Workspace, and using it consistently gives you:

• A searchable, auditable record of work communications
• File sharing within the corporate environment rather than via personal cloud storage
• Integrated video conferencing, calendar, and task management
• Consistent experience whether staff are in the office or at home

Supporting Remote Workers When Things Go Wrong

IT support for hybrid workers requires a different approach than the traditional "walk to the IT desk" model. Your support provision should include:

• Remote diagnostic and support capability (screen sharing, remote access tools)
• Clear escalation paths for hardware failures, including a process for shipping replacement devices quickly
• A self-service portal or knowledge base for common issues
• Response time commitments that account for the urgency of a remote worker being completely offline

Is your hybrid working IT setup genuinely fit for purpose? future® Office helps UK businesses design and implement Workplace IT environments that support hybrid working properly, from devices and MDM to collaboration platforms and remote support. Talk to us about your setup.

‍