NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 5: Security considerations for the telework and remote access life cycle – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 5.4: Operate and maintain: patch, review logs, report anomalies and assess policy compliance

What does 5.4 require?

Regular operational processes keep the solution secure: watching for upgrades and patches to each component and applying them; ensuring clocks are synchronised; reconfiguring access control as policy changes; detecting and documenting anomalies in the solution, reporting them to other systems' administrators as appropriate; reviewing logs; and periodically assessing whether the remote access policy, and the processes and procedures under it, are actually followed.

Maintained by Gerard Blokdyk

Other controls in Section 5: Security considerations for the telework and remote access life cycle – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls