NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 2: Overview of enterprise telework and remote access security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 2.3: Put BYOD and third-party devices in a separate, external network

What does 2.3 require?

An organisation that allows personally owned or third-party-controlled devices inside its facilities strongly considers a separate, dedicated external network for them (off the enterprise network, for example beyond the demilitarised zone) that grants no more access than those users already have through remote access, secured and monitored the same way remote access segments are; organisations considering mobile BYOD also look at virtual mobile infrastructure to keep enterprise data off the device.

Maintained by Gerard Blokdyk

Other controls in Section 2: Overview of enterprise telework and remote access security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls