An organization that uses any level of remote work should implement a Remote Working Policy that outlines how company resources are secured when used in remote, decentralized environments.
Control Type: Administrative
Control Function: Preventive & Deterrent
Description: Remote working has become a staple of modern workplaces and has done much to change the structure of enterprise digital environments. Since remote working decentralizes many aspects of enterprise computing, it requires specific controls and governance to protect resources as they move outside of the on-premises network. A remote working policy establishes an organization's strategy for keeping company assets secure in a remote working environment. The policy should explain expectations for secure use of company assets from remote networks, as well as specific IT measures used to manage, secure, and monitor user activity in remote environments.