Security1 min read
Zero trust for distributed teams: a starter checklist
When your team spans a dozen countries, the office network can't be your security perimeter. Here's the baseline we apply to every engagement.
Aisha Rahman
Security Architect · ITeraLove
Our people work from many countries, often on client infrastructure. We assume no network is trusted and verify every request.
The baseline
- SSO everywhere with phishing-resistant MFA (passkeys or hardware keys).
- Least privilege by default: access is granted per project and expires automatically.
- Managed devices with disk encryption, automatic updates and EDR.
- No shared accounts. Every action is traceable to a person.
- Secrets in a vault, never in chat, email or source code.
Client onboarding checklist
- Agree on data classification and where data may be stored.
- Provision named accounts and avoid credential sharing.
- Enable audit logging on every system we access.
- Document an incident contact on both sides.
Offboarding matters as much
Most incidents we investigate involve access that should already have been removed. We revoke access the same day an engagement ends and review it quarterly.
Ask us for a security baseline review if you'd like this applied to your own team.