NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 3.4: Plan how remote access client software and telework devices will be maintained and remotely managed

What does 3.4 require?

Before selecting a remote access solution the organisation plans how the client software's security will be maintained and updated, and more broadly how the telework devices it issues will be managed and supported, for example a help desk agent connecting to a device remotely. Remote management is secured, in particular by encrypting the communications and mutually authenticating the endpoints. Organisations with higher security needs use thick remote access clients, which are harder to compromise, where possible.

Maintained by Gerard Blokdyk

Other controls in Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls