Tech teamRunning a website or small org
Exposed remote access (RDP/VPN)
Remote sign-in doors left open to the whole internet.
Understand it
Remote-desktop and VPN gateways let staff work from anywhere - and let attackers try the same. Poorly protected remote access is a leading route in for ransomware.
How to spot it
Remote-desktop or admin ports reachable from the open internet; no two-step sign-in on remote access.
Close the gap
- Never expose remote desktop directly to the internet.
- Require two-step sign-in on all remote access.
- Limit who may connect, and from where; patch gateways quickly.
- Alert on unusual remote logins.
What to do about it
This sits with whoever builds and runs your website or systems - it’s beyond what a personal plan should promise to fix. If that’s not you, hand it to whoever looks after your security. We’d rather be honest about where we stop.
Your own accounts and devices are still worth protecting; your plan covers those.