Remote work expands your attack surface. 10 practical tips:
- 1. MDM on all remote Macs. No exceptions.
- 2. FileVault encryption. Lost unencrypted laptop = data breach.
- 3. VPN or zero-trust access. Public WiFi is hostile.
- 4. MFA everywhere. Remote workers are prime phishing targets.
- 5. Endpoint protection. Business EDR on every device.
- 6. Automatic updates. Enforce via MDM.
- 7. Secure home WiFi. Change defaults, WPA3, update firmware.
- 8. Cloud backup. Remote Macs cannot back up to office NAS.
- 9. Security training. Regular phishing simulations.
- 10. Offboarding procedures. Remote wipe, revoke access, recover data.

