“Create a separate user profile with minimal privileges for work-only use. Close all work-related windows, applications, files, and documents when not in use. Do not use work email addresses to sign up for unauthorised, free tools. Grant access to your employees to corporate network only though a company-approved VPN with multi-factor authentication,” the advisory states.