Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Telework Cybersecurity Resources: New ITL Bulletin and Blog Posts

NIST has published a new ITL Bulletin (March 2020) that addresses enterprise security solutions for telework, remote access, and BYOD. Also, a new Telework Cybersecurity summary is available on the CSRC homepage and will be updated as new resources are a

As millions of Americans transition from an office environment to their homes to continue to work, maintaining cybersecurity while teleworking is imperative during this challenging time. For organizations/enterprises establishing telework security policies, remote access solutions, etc., NIST has developed a comprehensive telework resource guide that provides information on securing enterprise telework, remote access, and bring your own device (BYOD) solutions.

The new NIST Information Technology Laboratory (ITL) Bulletin on Telework Security is based on the 2016 NIST Special Publication (SP) 800-46 Revision 2, Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security, which remains relevant. Some key concepts in the bulletin include:

  • Developing and enforcing a telework security policy, such as having tiered levels of remote access;
  • Requiring multi-factor authentication for enterprise access; and
  • Securing all types of telework client devices—including desktop and laptop computers, smartphones, and tables—against common threats.

This is just one of many available resources NIST has identified for organizations and individuals that are now teleworking in a larger capacity. These are linked from a Telework Cybersecurity section on the CSRC homepage:

The Telework Cybersecurity summary will be updated as new NIST cybersecurity and privacy resources for telework become available.

 

 

Released March 19, 2020