I have a small business (currently 10 employees). We are fully remote, and some of us travel internationally occasionally (once or twice a year). We use MS 365 E5 for Office apps, and Onedrive for shared data storage. I am looking to add at least a VPN service and a password manager, and I would love recommendations for services that are easy to use, inexpensive for my group size, and secure.
I am also open to suggestions for other services/software we should consider. I can’t really get out of M365 because of client expectations, but other suggestions are very welcome.
Our security stack for small businesses includes MDR for endpoints, MDR for Office 365, security awareness training, local admin account management, DNS filtering, vulnerability and patch management. Then regular reporting things like MFA audits, backup testing and audits, external pen test, dark web monitoring (that one is pretty worthless but people like it).
Also as u/malikto44 pointed out - you need backups!
I use Graphus for advanced email security to enhance overall cybersecurity resilience.
I also use Graphus to protect against phishing attacks and other email threats.