A security checklist for remote IT support
Remote access is powerful – and a target for fraud. Seven rules for IT teams and service providers.
Remote support saves hours of travel, but scammers also use remote tools to trick people. IT teams and service providers should hold themselves to clear rules.
- Customer consent every time: the user approves each session on their own screen.
- One-time codes: session codes expire quickly and work only once.
- Visible sessions: the user can see a session is active and end it at any moment.
- Encryption end to end: screen, keyboard and mouse data must be encrypted.
- Named technicians: no shared logins; every technician has their own account with two-step verification.
- Audit trail: record who connected to which computer, when and for how long.
- Unattended access by exception: only on machines you manage, with the owner’s written agreement.
Teach your customers one more rule: a genuine support provider never asks for payment or bank details during a remote session.
Dristi is built around these principles. Learn more.