Hybrid and remote work is now the norm for many Perth businesses - but most set it up reactively, patching together tools without a proper foundation. The result is security gaps, frustrated staff, and IT that doesn't scale. Here's how to do it right.
Start With the Right Devices
The biggest remote work mistake Perth businesses make is letting staff use personal computers to access company data. Personal devices aren't managed, aren't patched consistently, and often have no endpoint protection. Business-managed laptops - enrolled in Microsoft Intune or a similar Mobile Device Management (MDM) platform - give you control over security policies, remote wipe capability, and software deployment regardless of where the device is located.
If budget is a constraint, at minimum enforce that any personal device accessing company data has up-to-date antivirus, full-disk encryption enabled, and a strong device passcode.
Multi-Factor Authentication Is Non-Negotiable
With staff logging into company systems from home, MFA is the single most impactful security control you can implement. Without it, a stolen or phished password gives an attacker full access to your email, files, and systems. With MFA enabled on Microsoft 365 or Google Workspace, that same stolen password is useless without the second factor.
Enable MFA for every user. No exceptions - including business owners and senior staff who are frequently targeted by phishing attacks precisely because they have broader access.
Do You Actually Need a VPN?
Many Perth businesses default to setting up a VPN for remote work - but for cloud-first businesses using Microsoft 365, SharePoint, or similar services, a VPN adds complexity without much benefit. Those services are already designed for secure access over the internet.
A VPN is genuinely needed when staff need to access on-premises resources - a server in your office, an internal accounting system, or network-attached storage. If your business is primarily cloud-based, focus your energy on MFA and endpoint management instead. For the full breakdown of remote access VPN vs site-to-site, platforms, and setup mistakes to avoid, see our guide to business VPNs for Perth companies.
Microsoft 365 as the Remote Work Backbone
For most Perth SMBs, Microsoft 365 Business Premium is the single best investment for remote work. It includes:
- Teams - video calls, chat, and file collaboration in one place
- SharePoint & OneDrive - cloud file storage accessible from anywhere
- Intune - device management for company and personal devices
- Defender for Business - enterprise-grade endpoint protection
- Conditional Access - block logins from untrusted locations or devices
The key is configuration - most of these features are off by default or require setup to work as intended. Out-of-the-box Microsoft 365 is not secure out-of-the-box.
Securing the Home Network
You can't control your employees' home routers, but you can set expectations. Encourage staff to:
- Change the default admin password on their home router
- Keep router firmware updated
- Use the 5GHz band for work devices where possible
- Avoid working on public WiFi without a personal VPN
A short staff security awareness session goes a long way - most people are receptive once they understand the risk.
Backup Still Matters With Remote Staff
When data lives on laptops rather than a central server, backup becomes both more important and easier to miss. Ensure OneDrive or SharePoint sync is enabled and working on all remote devices - this means files are backed up to the cloud automatically. Supplement with a proper cloud backup solution that retains versioned copies, so accidental deletion or ransomware doesn't mean permanent data loss.
Document Your Remote Work IT Policy
A one-page IT policy for remote work removes ambiguity and gives your IT provider a baseline to enforce. Cover: approved devices, approved software, what to do if a device is lost or stolen, and who to call for IT issues. It doesn't need to be complex - it just needs to exist.
Frequently Asked Questions
Do remote staff really need a VPN if we already use Microsoft 365?
Not necessarily. If your team works entirely in cloud tools like SharePoint, OneDrive, and Teams, a VPN often adds complexity without much extra security benefit, since those services are already built for secure access over the internet. A VPN becomes genuinely useful when staff need to reach something on-premises, like a server or an internal system sitting in your office.
Is it safe for staff to work from a personal laptop?
It's riskier than a business-managed device, because personal computers usually aren't patched consistently and often lack proper endpoint protection. If a managed laptop isn't an option for everyone, at minimum require up-to-date antivirus, full-disk encryption, and a strong passcode on any personal device used for work.
What's the single most important security step for remote work?
Multi-factor authentication, without exception. A stolen or phished password on its own gives an attacker full access to email and files, but with MFA switched on that same password is useless without the second factor, which is why it matters even more once staff are logging in from outside the office.
How do we make sure remote staff's data is actually backed up?
Check that OneDrive or SharePoint sync is switched on and working on every remote device, since that gets files into the cloud automatically. It's worth pairing that with a proper cloud backup solution that keeps versioned copies, so an accidental deletion or a ransomware incident doesn't turn into permanent data loss.
Secure remote access, whether via VPN or a properly configured cloud setup, is part of every network we build for Perth businesses.
Network Setup →Need help setting up remote work for your Perth team?
Call 0433 087 091 - we'll get your team set up securely, without the complexity.
Get in TouchFor related reading, see our guides to Hybrid Work IT Setup for Perth Businesses and SaaS Management for Perth Businesses.