Remote access basics: the doors your company opens to the outside

Remote work is not a perk the company grants: it is an access question the company answers, either deliberately in advance or expensively by accident.

Working from outside the office used to be a perk, argued about in policies and granted to trusted people with laptops. It stopped being that. Outside is now simply where life happens: the errand at noon, the child home sick, the trip that runs into a workday. So the real question is not whether your company allows remote work. It is which of the company's doors already open from outside, and whether anyone chose that on purpose.

The mechanism is doors. Company systems live behind them: the shared files, the mail, the tools, the accounts payable folder only two people should ever open. Remote work is the question of reach: which doors are reachable from anywhere with a password, which open only from inside the office, and who holds which key. A company that has never drawn this map has doors it cannot see, and doors nobody can see are the only ones that never get locked.

The accidental version is common enough to be a genre: the accounting folder lives in somebody's personal account because it was convenient in a specific month two years ago. Nobody decided; that is the point. An intern's phone still has the mail configured from onboarding. A login is shared by two people who each kept half of it in a notes app. None of this appears in any meeting. It appears the day somebody asks a plain question and nobody can answer it.

The practice starts with the inventory: list the doors before answering anything about any of them. Every system the company pays for, every shared folder, every mailbox, every tool with a login, including the ones opened years ago by people no longer here. Most companies have never written the list down, and the writing down is where the surprises live: things reachable from anywhere that nobody meant to expose, and things only one departing person can reach at all.

Then each door gets a deliberate answer, one of three: reachable from anywhere because the work requires it, inside-only because the contents say so, or retired because nothing behind it is used anymore. Written down, each with an owner. The verdicts can be argued about; what cannot be healthy is having no verdict, which is how every door defaults to open by inertia.

And under all of it sits the credential layer, because none of the answers hold without it. Unique accounts per person, so a door's history names its visitor. Second factors on anything that matters, so a stolen password is a locked handle rather than an entry. A password manager for the team, so sharing is deliberate instead of pasted into a chat. And the principle above the tactics: access follows role rather than person, so a departure shrinks a role instead of breaking a door.

This is structure, and we keep it at that level on purpose: the specific products, protocols, and settings belong to the documentation of whatever providers your company uses, and to the people who administer them. Where we sit is the map and the discipline: helping a team see its own doors and decide them on purpose, before an incident decides instead. Guidance, not guarantees: no arrangement removes risk entirely; a deliberate answer per door is what turns an accident into a policy.