+PE-17 [H] Alternate Work Site

PE-17 [H] Alternate Work Site

Control

  1. Determine and document the [Assignement: alternate work sites] allowed for use by employees;
  2. Employ the following controls at alternate work sites: [Assignement: controls];
  3. Assess the effectiveness of controls at alternate work sites; and
  4. Provide a means for employees to communicate with information security and privacy personnel in case of incidents.

Discussion

Alternate work sites include government facilities or the private residences of employees. While distinct from alternative processing sites, alternate work sites can provide readily available alternate locations during contingency operations. Organizations can define different sets of controls for specific alternate work sites or types of sites depending on the work-related activities conducted at the sites. Implementing and assessing the effectiveness of organization-defined controls and providing a means to communicate incidents at alternate work sites supports the contingency planning activities of organizations.

Assessment Objective

  1. [Assignement: alternate work sites] are determined and documented;
  2. [Assignement: controls] are employed at alternate work sites;
  3. the effectiveness of controls at alternate work sites is assessed;
  4. a means for employees to communicate with information security and privacy personnel in case of incidents is provided.

Assessment Method

Examine

Physical and environmental protection policy procedures addressing alternate work sites for organizational personnel list of security controls required for alternate work sites assessments of security controls at alternate work sites system security plan privacy plan other relevant documents or records

Interview

Organizational personnel approving the use of alternate work sites organizational personnel using alternate work sites organizational personnel assessing controls at alternate work sites organizational personnel with information security and privacy responsibilities

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
is blocked by PE-17 [H] Alternate Work Site – Assessment Procedure
is blocked by Alternate Work Site