Remote access
Coming in from outside the organisation's network, usually through a gateway. Treat it as privileged even when the user is not.
Remote access is a connection that originates outside your network and enters through a gateway, including over the internet. VPN, ZTNA, VDI, or a vendor's support tool — the path is still a front door.
MFA, device checks, least privilege, logging, and a way to kill a session. Remote access scams impersonate IT to talk you into opening that door for them. Hang up.
Fact source: ASD's ACSC glossary.