NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 5: Security considerations for the telework and remote access life cycle – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 5.2: Design authentication, access control, endpoint security and incident handling, and document them

What does 5.2 require?

Once policy is set, the solution is designed: the remote access authentication method and how its client and server components are implemented, including the procedures for issuing and managing credentials; which types of remote access communications are permitted and denied; how the remote access servers and the telework client devices will be secured; and how incidents involving the solution will be handled. The security aspects of the design and the incident plans are documented in the system security plan.

Maintained by Gerard Blokdyk

Other controls in Section 5: Security considerations for the telework and remote access life cycle – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls