NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 5: Security considerations for the telework and remote access life cycle – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 5.1.2: Set risk-based access tiers by device type, bar unknown devices and reassess periodically

What does 5.1.2 require?

The organisation decides on a risk basis what level of remote access each type of client device may have, considering the sensitivity of the resources, the device's level of security and its physical and technical exposure. It is cautioned to prohibit unknown devices unless they can be given a secure environment, because the risk from unknown devices without one is extremely high; removable media holding telework data is encrypted; and the policy is reassessed periodically so that permitted device types and access levels change as risks and technology change.

Maintained by Gerard Blokdyk

Other controls in Section 5: Security considerations for the telework and remote access life cycle – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls