Standard
Remote Working Security Standard
This standard defines the minimum security requirements for personnel working remotely: that is, working from any location outside a corporate office, including home, hotels, client sites, co-working spaces, and public locations. It establishes enforceable requirements for device security, network usage, physical workspace protection, and data handling when work is conducted outside the controlled office environment.
- Type
- Standard
- Version
- 1.2.1
- Date
- 2026-10-16
- Owner
- Chief Information Security Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon material change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Governance and accountability
- 4. Device requirements
- 5. Network requirements
- 6. Workspace and physical security
- 7. Data handling and classification
- 8. Bring-your-own device (BYOD)
- 9. Incident reporting and response
- 10. Exceptions
- 11. Compliance and enforcement
- 12. Framework alignment
Frameworks it maps to
- ISO/IEC 27001:2022
- ISO/IEC 27002:2022
- NIST SP 800-46 Rev. 2
- NIST SP 800-111
- NIST Cybersecurity Framework 2.0
- CSA CCM v4.1
- CIS Controls v8.1
Related documents
- Information Security Policysecurity
- Acceptable Use Policysecurity
- Authentication and Password Management Standardsecurity
- Endpoint Management and Device Compliance Procedureoperations
- Data Classification and Handling Standardsecurity
- Bring Your Own Device (BYOD) Policysecurity
Next
All Documents