Remote EA Security & Access Risk Assessment
Worried about giving a remote executive assistant access to your inbox, passwords or finances? Answer a few questions about your tools and habits. You'll get a risk score, the exact permissions to set in each app, a device setup brief and a 24-hour plan for removing access.
Step 1: Which tools will your EA work in?
Pick everything that applies. Your blueprint includes setup steps for each one.
Choose where your passwords live to continue.
Step 2: Credentials and access
How will your assistant get into your accounts, and how much can they do once inside?
Answer every question to continue.
Step 3: Devices, sign-in and offboarding
How your assistant's laptop, logins and exit are handled.
Answer every question to continue.
Your remote EA security blueprint
Lower is safer. Three or more red flags always rate as critical.
Issues to fix before your EA logs in for the first time
Best-practice controls already in place
Where you sit
Up = more credential exposure · Right = weaker device hygiene
Red flags and fixes
Your least-privilege access matrix
What to give your assistant in each tool, what to keep for yourself, and how to set it up. Menu names can shift as vendors update their apps, so check each vendor's help center if a label has moved.
Device hygiene and browser separation brief
The 24-hour rapid revocation protocol
Use this the day a contract ends, or straight away if you suspect a problem. Do every step, even if the parting is friendly.
This assessment is a self-check based on widely used least-privilege and access-control practices for remote teams. It is general guidance, not a security audit or a compliance certification.
Remote EA Security FAQ
Is it safe to give a remote executive assistant access to my email?
Yes, when your assistant signs in with their own account and you grant delegated access, rather than sharing your password. Gmail and Microsoft 365 both let an assistant read, send and organize mail on your behalf without being able to change your password or security settings.
Should I share my password with my executive assistant?
No. Sharing your own password means every action looks like it came from you, and you can't remove access without changing it. Give your assistant their own login, delegated access to your inbox and calendar, and shared logins through a password manager vault.
What is the safest way to share passwords with a remote assistant?
Use a business password manager such as 1Password or Bitwarden. Put only the logins your assistant needs in a dedicated vault or collection, hide passwords where the app supports it, switch off export, and require two-factor sign-in.
What should I do when an executive assistant contract ends?
Remove access within 24 hours: suspend their accounts and sign them out of every session, remove inbox and calendar delegation, take them out of your password vault and change the shared passwords, cancel their cards, revoke connected apps and tokens, and review recent sign-in logs.
Does this assessment make my business SOC 2 compliant?
No. The assessment is a self-check based on widely used least-privilege and access-control practices for remote teams. It helps you set up safer access for an assistant, but it is not a security audit or a compliance certification.
Looking for more? Browse our free executive assistant resources, or run the delegation audit to decide which tasks to hand off.