NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
NIST's guide to securing enterprise telework, remote access and BYOD: planning assumptions, method choice, server hardening and placement, authentication and traffic protection, client device and data security, and the policy-to-disposal life cycle.
NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security is a compliance framework from United States with 4 domains and 26 controls. The largest domains are Section 5: Security considerations for the telework and remote access life cycle – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security (8 controls), Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security (7 controls), Section 4: Telework client device security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security (6 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (4)
Section 2: Overview of enterprise telework and remote access security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
| Code | Title |
|---|---|
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::2.1a | Secure every component of the telework and remote access solution |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::2.1b | Threat-model the remote access servers and reachable resources before deployment |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::2.1c | Plan on the assumptions that devices will be lost, infected and used on hostile networks |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::2.2 | Choose remote access methods with their security implications in view |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::2.3 | Put BYOD and third-party devices in a separate, external network |
Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
| Code | Title |
|---|---|
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::3.1 | Harden, isolate and administer remote access servers securely |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::3.2 | Place remote access servers at the network perimeter and restrict their internal reach |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::3.3.1 | Authenticate every teleworker, with multi-factor and mutual authentication where warranted |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::3.3.2 | Use device health checks and network access control where feasible, without relying on them |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::3.3.3 | Protect remote access communications with approved cryptography and consider disabling split tunnelling |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::3.3.4 | Limit teleworkers to the applications they need, considering what those applications reach |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::3.4 | Plan how remote access client software and telework devices will be maintained and remotely managed |
Section 4: Telework client device security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
| Code | Title |
|---|---|
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::4.1 | Secure telework PCs: multi-policy firewalls, tested auto-sensing, updates and limited privileges |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::4.2 | Secure telework mobile devices through centralised management and guidance |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::4.3 | Treat telework data as an organisational asset and protect sensitive information on devices |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::4.3.1 | Encrypt all sensitive data at rest on telework devices and removable media |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::4.3.2 | Set policy for telework data held in virtual machine images and encrypt them where risk warrants |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::4.3.3 | Back up telework device data with protected transport and protected copies |
Section 5: Security considerations for the telework and remote access life cycle – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
| Code | Title |
|---|---|
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::5.1 | Write a telework security policy and record it in the system security plan |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::5.1.1 | Permit only remote access forms that can meet the overall security policy |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::5.1.2 | Set risk-based access tiers by device type, bar unknown devices and reassess periodically |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::5.1.3 | Educate teleworkers, define their responsibilities and provide help and secure communications |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::5.2 | Design authentication, access control, endpoint security and incident handling, and document them |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::5.3 | Test the implementation thoroughly and lock down defaults before production |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::5.4 | Operate and maintain: patch, review logs, report anomalies and assess policy compliance |
| nist-sp-800-46-rev-2-enterprise-telework-remote-access-and-byod-security::5.5 | Sanitise telework devices and remote access servers before they leave the organisation |
What is NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security and who does it apply to?
NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security is a compliance framework from United States with 4 domains and 26 controls. NIST's guide to securing enterprise telework, remote access and BYOD: planning assumptions, method choice, server hardening and placement, authentication and traffic protection, client device and data security, and the policy-to-disposal life cycle. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security actually require?
NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security has 26 controls organised across 4 domains. The largest domains are Section 5: Security considerations for the telework and remote access life cycle – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security (8 controls), Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security (7 controls), Section 4: Telework client device security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security (6 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security do I already cover?
NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security?
Start your NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 26 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.
Get Started Free →Free forever, no credit card required