Are you vigilant in protecting customer data? 3of4...

Be just as strict with remote access. Your VPN should be using the strongest possible encryption method. Only offer VPN to employees who have valid business reason. A VPN connection is a door to your LAN, and should only be open when it needs to be.