Best practices for protecting firm and client data as a distributed team