NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 2: Overview of enterprise telework and remote access security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 2.1b: Threat-model the remote access servers and reachable resources before deployment

What does 2.1b require?

Before a telework or remote access solution is designed and deployed, the organisation builds threat models covering its remote access servers and whatever those servers expose, so that threats, their likelihood and their impact drive the choice of controls rather than being discovered after go-live.

Maintained by Gerard Blokdyk

Other controls in Section 2: Overview of enterprise telework and remote access security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.