For starters, don’t use outdated or susceptible digital personal networking software program (VPN) or different edge entry instruments which can be simply attacked. It’s crucial to have some form of course of in place to establish safety points in your distant entry software program and to be ready, if needed, to make the arduous resolution to close down distant entry ought to a vulnerability be recognized for which there is no such thing as a available patch.
Guarantee you’ve strategies to speak such arduous selections and make sure that stakeholders perceive why you’re pulling the hearth alarm and limiting entry if wanted.
Take into account eliminating SSL or web-based VPN
Should you don’t have the flexibility to handle or keep distant nodes, at the very least ensure you are shifting to some form of mechanism to handle and keep this distant entry software program. Should you solely have entry to an on-premises patching device akin to Home windows Software program Replace companies, you might have to put money into cloud options akin to third-party patching instruments or Intune with a view to keep distant property.