The telework security policy states the permitted forms of remote access, the types of telework device allowed to use each, the level of access each type may be granted, and how the remote access servers are administered and their policies updated; it is documented in the system security plan, and other security policies are reviewed and adjusted where telework affects them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.