NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 3.3.1: Authenticate every teleworker, with multi-factor and mutual authentication where warranted

What does 3.3.1 require?

The remote access server authenticates each teleworker before granting any access. Where passwords are the only factor, the remote access authentication mechanism is kept separate from the organisation's other mechanisms (while assuming some users will reuse passwords); organisations with higher security needs use authentication that does not rely on passwords alone, such as multi-factor authentication; and mutual authentication is implemented whenever feasible so the user can verify the server, for example through its certificate, before presenting credentials.

Maintained by Gerard Blokdyk

Other controls in Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls