NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 3.3.4: Limit teleworkers to the applications they need, considering what those applications reach

What does 3.3.4 require?

Access control for applications limits what a teleworker can use through remote access, and any policy that restricts a user to particular applications is set with regard to the further applications and hosts that an allowed application can itself reach, so that an allowed application does not become a path to everything else.

Maintained by Gerard Blokdyk

Other controls in Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls