Additionally, never let your work devices connect to your home network. Always set up a secondary business network, that is configured to be isolated and not allowed to communicate with other local devices, except whitelisted ones like printers.