We are contemplating allowing an employee to work from home several days a week. The person manages a specialized sales dept and is not truly a "banker" so he does not have access to the core banking system. He would have access to email and certain databases.

I think we should have a written agreement with the employee that outlines security precautions - i.e., he will keep his home office and PC locked/secured, anti-virus program current, etc. Does anyone have experience with this? Or does anyone have a sample agreement for this purpose?

Setting up a VPN (virtual private network) would be a great way to go. It is quite easy to secure.

I use a VPN, can't use wireless and abide by the same user agreement I have at work. The VPN allows only me to enter while my PC can still be used for non-banking tasks (whatever that would be) since it is mine. This also allows you to monitor whatever you need to while they are online.

If you give them a laptop, make it just for work. If they use a personal PC, make them follow your existing rules.

We've been using GoToMyPC.com and it's been through the audit process ok. It's a little slow with a dial up connection, but I hear with broadband it's just like being at work.

Could look at services that are web based and have built in security. One example of an Intranet with remote encrypted access - CSI Web @Work (http://demo.csiweb.com). Or if you are just looking for a way to securely exchange info (without special software) give another service by this company a try www.csiesafe.com. VPN is your best bet if you need host access. Hope this helps.