NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 4: Telework client device security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 4.1: Secure telework PCs: multi-policy firewalls, tested auto-sensing, updates and limited privileges

What does 4.1 require?

Telework PCs carry the local security controls of any enterprise client plus additional measures for hostile environments. A personal firewall that supports multiple policies is used wherever possible and configured for at least an enterprise and an external environment; any auto-sensing of the environment is tested thoroughly, users are told how it works, and it is only used if it tells the user which environment it has chosen so they can override a mistake. The organisation plans how operating system and application updates will reach telework PCs, encourages users to update fully before travel, and has users work from limited-privilege accounts, using a separate administrator account only for tasks that need it.

Maintained by Gerard Blokdyk

Other controls in Section 4: Telework client device security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls