INF.8 Working from Home

Introduction

Teleworkers, freelance employees, and the self-employed typically work from home. In contrast to a company office, these employees use a workplace on their own property. They thus need to be able to sufficiently separate their occupational and private environments. If employees work from home on an ongoing basis, various legal requirements must also be fulfilled; for example, their workplaces must meet the requirements regarding occupational health and ergonomics.

Meanwhile, a home workplace cannot be expected to meet the same infrastructural security requirements as the office rooms of an organisation. A home workplace is often also accessible to visitors or family members, for example. That is why safeguards must be taken to achieve a security level that is comparable to an office room.

Objective

This module shows how the infrastructure of a home workplace can be established and operated in a secure manner. The core objective of the module is to protect organisations' information when their employees work from home.

Scoping and Modelling

Module INF.8 Working from Home must be applied to all rooms that are used for teleworking.

The module contains basic specifications to be considered and fulfilled to counteract the threats relevant to home workplaces. However, it only defines specific requirements for the infrastructure of a stationary workplace that can be accessed by third parties. Security requirements for the IT systems used (e.g. clients and multifunctional devices) and, in particular, the technical aspects of teleworking (e.g. communication links) are not the subject of this module. They are described in module OPS.1.2.4 Teleworking or in the respective system-specific modules.

Useful Resources

The International Organization for Standardization (ISO) provides guidelines for the physical and environmental security of buildings and rooms in annex A.11 of ISO/IEC 27001:2013.

The German Institute for Standardisation (DIN) provides specifications for physical security in buildings and rooms in the standard DIN EN 1627:2011-09.

The National Institute of Standards and Technology (NIST) has published NIST Special Publication 800-53, “Assessing Security and Privacy Controls for Federal Information Systems and Organizations”, which provides specifications on the physical and environmental security of buildings in appendix F-PS.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

3. Powiązane regulacje

Powiązane zgłoszenia

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)