Using a VPN creates a secure and encrypted connection to the corporate network, which is essential when accessing sensitive data. This adds a layer of security that protects against eavesdropping and other threats to confidentiality. While changing passwords regularly and avoiding suspicious links are good security practices, they do not directly pertain to the secure access of a corporate network. Reporting lost devices is important, but it is a reactive measure after the confidentiality may already be compromised. Logging off the network when not in use, while a good practice, does not inherently protect data that is being transmitted.