NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 2: Overview of enterprise telework and remote access security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 2.1c: Plan on the assumptions that devices will be lost, infected and used on hostile networks

What does 2.1c require?

Telework security policy and controls are planned on four assumptions: that client devices will end up in the hands of malicious parties who will try to recover their data or use them to reach the enterprise; that the networks between the device and the organisation are untrusted and will be eavesdropped on or manipulated; that malware will get onto devices; and that devices face physical risks such as theft and someone reading the screen in a public place. Controls are chosen to hold under each assumption.

Maintained by Gerard Blokdyk

Other controls in Section 2: Overview of enterprise telework and remote access security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls