NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 4: Telework client device security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 4.3.2: Set policy for telework data held in virtual machine images and encrypt them where risk warrants

What does 4.3.2 require?

Where telework uses virtual machines, the organisation has policies for the telework data stored inside VM images, since a VM disk holds data just as a physical disk does; it considers encrypting every telework VM image, and for high-risk situations involving highly sensitive information it encrypts each individual VM image and may add a second layer of protection.

Maintained by Gerard Blokdyk

Other controls in Section 4: Telework client device security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls