Run Remote Agent Workstation Security Audit — Free

Approved Device and Workstation Identity

Device is on the approved asset list critical (required)

Confirm the workstation asset tag, hostname, or device ID matches an approved company-managed or authorized remote-work device.

No unauthorized shared or public device in use critical (required)

Confirm the agent is not using a public, shared, or unapproved personal device for handling customer work.

Yes No N/A

Local admin privileges are restricted critical (required)

Verify the user does not have unnecessary local administrator access on the workstation.

Yes No N/A

Device encryption is enabled critical (required)

Confirm full-disk encryption is active on the workstation to protect data at rest.

Yes No N/A

Operating system and endpoint agent versions recorded

Record the current OS version and any required endpoint management or security agent versions.

Endpoint Protection and Patch Status

Firewall is enabled and enforcing policy critical (required)

Verify the host firewall is active and configured according to company policy.

Yes No N/A

Antivirus or EDR protection is active critical (required)

Confirm antivirus or endpoint detection and response protection is installed, running, and not disabled.

Yes No N/A

Virus definitions or security signatures are current critical (required)

Verify security signatures are up to date within the organization-defined threshold.

Operating system patches are current critical (required)

Record the number of days since the last successful OS security update and confirm it is within policy.

Required browser and collaboration app updates are current

Confirm browsers, softphone tools, chat clients, and other required applications are patched to approved versions.

Yes No N/A

Remote Access and Session Security

VPN or approved secure remote access is in use critical (required)

Confirm the agent connects through the approved VPN, virtual desktop, or other sanctioned remote access method.

Yes No N/A

Multi-factor authentication is required for access critical (required)

Verify MFA is enforced for remote access and sensitive applications.

Yes No N/A

Screen lock activates after inactivity critical (required)

Confirm the workstation locks automatically after the company-defined inactivity period.

Remote session is not left unattended while active critical (required)

Observe whether the agent leaves an active remote session unlocked or unattended during the audit.

Yes No N/A

Customer Data Handling and Local Storage

No customer data stored locally on the workstation critical (required)

Verify there are no local files, downloads, screenshots, exports, or cached records containing customer data on the device.

Yes No N/A

No customer data stored on removable media critical (required)

Confirm customer data is not saved to USB drives, external disks, or other removable storage.

Yes No N/A

Browser downloads and desktop folders are clear of customer records critical (required)

Check common local storage locations for exported reports, screenshots, or files containing customer information.

Yes No N/A

Approved cloud or system-of-record storage is used instead of local storage

Verify the agent uses approved enterprise systems for any required file storage or case documentation.

Yes No N/A

Physical Workspace and Closeout

Screen is positioned to prevent unauthorized viewing

Confirm the monitor is positioned to reduce shoulder-surfing risk from household members or visitors.

Yes No N/A

Sensitive information is not visible in the workspace

Verify printed materials, notes, or other visible items do not expose customer or company confidential information.

Yes No N/A

Inspector comments and corrective actions documented

Record all deficiencies, non-conformances, and required remediation steps identified during the audit.

Inspector signature

Signature of the person completing the inspection.

Get your results

Enter your email — we'll send you a PDF of your filled-out template, plus the occasional MangoScoop newsletter (templates, workflow tips, product updates). Unsubscribe anytime — link is in every email.

Email (required)

Your name (optional)

Run: Remote Agent Workstation Security Audit

Approved Device and Workstation Identity

Endpoint Protection and Patch Status

Remote Access and Session Security

Customer Data Handling and Local Storage

Physical Workspace and Closeout

Get your results