Remote access you forgot you had

Most small networks have more ways in than the owner thinks. TeamViewer from a job three years ago. A router “cloud” account. A camera vendor who can still reach the site. A former employee whose laptop still has the VPN profile.

Once a quarter, ask a blunt question. Who can get on this network from somewhere else? Write the names. If a name is a company you no longer pay, cut it. If a name is a person who no longer works for you, cut it.

Turn on two factor for every remote login that still exists. If the product cannot do that, it is not a remote access tool you should keep.

This takes an hour. It saves the week you would spend after someone else’s laptop becomes your problem.