Enforce safeguarding measures for “Controlled Unclassified Information” (CUI) at alternate work sites.

It is not uncommon for employees to work from home. An employee's Home is an "alternate worksite". Other alternate work sites may include government facilities and client sites. This practice seeks to ensure that you still protect CUI outside of your facility.

Encrypt your workstations to protect CUI. Ensure that you can deploy software updates to your remote employee's systems. Have the capability to secure remote systems at the same or similar level that you can for devices in your facility. This includes deploying updates, security policy settings, and being able to monitor the system when it is connected to your VPN. You may even decide to restrict the use of printers to prevent employees from printing CUI at home.