NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 3.1: Harden, isolate and administer remote access servers securely

What does 3.1 require?

Remote access servers stay fully patched, run to a security configuration baseline the organisation has defined, and are administered only by authorised administrators from trusted hosts. The organisation thinks carefully before co-hosting a remote access server with other services, considers separate solutions where user groups have very different security needs, and decides on a risk basis whether sensitive data must be wiped from the servers.

Maintained by Gerard Blokdyk

Other controls in Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls