Remote work needs attention in security policies