Remote worker - IT research

[Mark M]

I run a tiny business with 5 users (all office based) and I'm looking at the option of a remote worker (possibly overseas). We currently use M365 for Exchange and SharePoint for centralised document storage. All other programs are cloud based with the exception of 1 windows based software that the files are saved in a SharePoint folder. We don't have a local server/NAS. All passwords are stored in BitWarden with a private and shared vault.

One thing that has came up in conversation is what do I need to implement in the way of IT security for a remote worker. I'm planning on speaking to a couple of IT companies but I'd like to have some knowledge of what is best practice in this situation.

A couple of things I can think of include:

Password policy (unsure if the version of Bitwarden (Teams) we have can do this or if I need to upgrade to the Enterprise version)
2FA options and implementation
Active directory, we don't have anything in place currently. Everyone just has their own laptop with their own account on.
Someone said we'd need a VPN but I'm not sure as we dont have anything on-premise?


Thanks

 

[Mark M]

what license level of o365 are you using Mark?

You can implement device posture and conditional access for accessing your tenant (license dependent) but it is tricky without a domain as such, you could look at intune as well which would allow you to push policies.

you only really need a VPN if you are accessing onprem services, it sounds like almost all your infrastructure this person would need to access is MS, sharepoint/email/teams etc.

We currently have Business standard editions for all users but happy to upgrade them if need be.

 

[Mark M]

are you supplying company devices to employees? or are you expecting them to use Virtual machines.
im thinking of device return if/when they leave employment. making sure the devices are bitlockered and the recovery IDs are in InTune as examples

We supply devices to employees currently but I'm not sure what to do for a remote worker. For an overseas employee it feels like it could get difficult to get the laptop back if they stop working for us but I guess thats just something we would need to factor in. For an overseas role it is likely to be in South Africa due to the quality and availability of workers there.

Someone above mentioned remote desktop which might be something to consider for an overseas worker.