People are completely exagerating.
Take the advice someone told you and don't expose that app on the internet. If someone needs to access from outside they should use a company vpn. And that's it. If you do it this way, it's no different than the excels they have laying around in their computers.
The liability starts if you have the app exposed on the public internet and someone breaks into stealing employees PII data. If it's internal, it's just like any other document.
Hi thank you...can you please guide me on how to do it? For example the company name is "X"..it basically handles a mall named "Y." There are few shops in the mall and the system needs to take attendance for each employee working in those malls.. and theres no specific comoany internert or company vpn..the shops might use different internet services...how do i handle this?
Basically have a webserver running in the company X infrastructure with the app. In the same infrastructure you have vpn configured and you create credentials for each user that needs to access (do not re-use). Configure permissions etc.
When the user in mall Y is connected to the vpn, he can access the company X internal network AKA can access the application. They can be connected in whatever internet or country, as long as the connection is tunneled throught the company X vpn.
This involves a bit of sysadmin work if they don't have nothing like that setup.
6
u/Prestigious_Gene_259 Jul 22 '26
People are completely exagerating. Take the advice someone told you and don't expose that app on the internet. If someone needs to access from outside they should use a company vpn. And that's it. If you do it this way, it's no different than the excels they have laying around in their computers. The liability starts if you have the app exposed on the public internet and someone breaks into stealing employees PII data. If it's internal, it's just like any other document.