Remote access and equipment
These articles look at who and what can reach your systems, from remote-access tools and access policies to the routers and firewalls at the edge of your network.
Remote access and edge equipment are manageable when someone can name what is approved, who administers it, how exceptions are reviewed, and how an obsolete tool or device is removed.
Microsoft 365 needs a security plan of its own
Check how accounts, access policies, and operational responsibilities protect your use of Microsoft 365.
Ask your provider or team
Which authentication and device-access policies apply to which users, and what is excluded?
When the patch loses the race
Exploitation can now start before a fix exists. Ask what limits what an attacker can reach, not just how fast you patch.
Ask your provider or team
Which systems are internet-exposed, and could any of them be made not internet-exposed?
Who is allowed to remote into your network?
Remote-access tools are normal. An unmanaged list of them is a gap. Ask which are approved and what stops the rest.
Ask your provider or team
Which RMM tools currently have access to any device on your network?
Who owns your edge equipment?
State-sponsored actors are opportunistically compromising routers through defaults nobody rotated, not exotic tradecraft. Ask who owns the configuration.
Ask your provider or team
Who holds administrative access to the device, and is that access reviewed on any schedule?
Browse by topic
Want to discuss a security question?
If an article raises a question about your providers, recovery evidence, or security responsibilities, tell us what you have and what you need to decide.
Talk with us