The remote work shift puts the management of devices, applications, and data front and center in the security discussion. The firewall, local Active Directory, and VPN solutions typically don't scale or take into account the vast number of variables when users want to work from any device at any time.
The question is not whether or not you are using Microsoft 365 (formerly Office 365), but rather, are you using it securely? Microsoft has steadily improved the default security settings but it still requires some experience to get it 100% there. The amount of attacks on the M365 is astounding, specifically with phishing attempts to gain user passwords.
You have made a list and checked it twice, and figured out what apps are naughty and nice. Now it is time to actually make the move from Servers to Services. The key to this final step is a well thought out migration (and fallback) plan.
A clean install is best
Unless you cannot re-install server applications properly or there is no plan to use the server for more than six months, do a clean install.
What is the first thing that happens before you move homes? All of those old clothes, exercise equipment, and children's toys go off to the donation bin. This is also known as The Great Purge. The analog nature of all this stuff means that you are going to put it in boxes to haul it across the city.
Going from servers to services is a lot like playing a game of Jenga. You have to pull out all the various blocks (apps) without knocking over the tower (your business). You can go for the slow methodical method, or the "turn if off and see who complains" method.
The new Microsoft Edge browser has finally caught up to Google's Chrome browser, and the timing is great. The #wfh transition means that more personal devices are being utilized to access corporate resources. Often this is done via a web browser, which means your corporate security could depend on what browser they are using!
Microsoft transitioned to the Chromium-based engine for the new Edge browser which was released in January 2020. The move to the Chromium engine means that your favorite Chrome extensions will work in addition to the enhanced speed and page loads it provides.
Get ready to hear a lot about the Zero Trust security model going forward. The #wfh movement has put this front and center in any technology planning discussion. This is not a fad or product to implement, it's a mindset shift that needs to occur in our technology planning.