"Security measures shall be implemented when personnel are working remotely to protect information accessed, processed or stored outside the organization’s premises."[1]

Remote or telework presents additional information security risks. The employee or contractor's environment is not as secure as the organization's physical facility. Examples of policies that apply to remote work include forbidding personnel from printing or keeping confidential documents at home preventing them from leaving computing equipment unattended and requiring them to connect to the organization's VPN.