Remote Web Mgmt/Security

My Web 'developers' are pressuring me provide remote access to web hosts. Since we don't have 24x7 operations coverage, after hours support or monitoring is minimal, and if at all, so I recognize a need.

My first feeling is that remote controlat any time from any place makes for sloppy change management.

My second concern is that these are 'public' web servers, on a firewall-protected DMZ, what risks am I being exposed to opening these up for remote management/control.

Third concern is how to implement securely: VPN, PC Anywhere, internet based or dial-in only, Win2000 remote management faciltiies.

Can anyone offer their suggestions on how they address the need, or offer suggested resources to research the topic on my own?
Thanks,

Max