This study delves into the impact of remote work arrangements on information security risks and examines the moderating roles of information technology (IT) capability (technological system) and managerial capability (social system) from a socio-technical system view. This study differentiates between proactive and reactive remote work and assesses the differential impacts of these two types of remote work on firms’ information security risks. This study employs the Linear Probability Model (LPM) to test the hypotheses. The results indicate that both proactive and reactive remote work increase the likelihood and severity of information security risks. IT capability weakens the information security risks introduced by both proactive and reactive remote work. However, managerial capability can effectively mitigate the information security risks associated with proactive remote work, but its moderating effect on the relationship between reactive remote work and information security risks is not significant. In addition, we validate the robustness of the results through several methods, including the Heckman two-stage analysis, fixed effects logistic regression and Poisson regression, and additional analysis.