NIST SP 800-171 & CMMC 2.0 3.10.6 Requirement:
Enforce safeguarding measures for “Controlled Unclassified Information” (CUI) at alternate work sites.
NIST SP 800-171 & CMMC 2.0 3.10.6 Requirement Explanation:
It is not uncommon for employees to work from home. An employee's home is an "alternate worksite". Other alternate work sites may include government facilities and client sites. This practice seeks to ensure that you still protect CUI outside of your facility.
Example NIST SP 800-171 & CMMC 2.0 3.10.6 Implementation:
Encrypt your remote computers and all laptops to protect CUI. Ensure that you can deploy software and security updates to your remote employee's systems. Have the capability to secure remote systems at the same or similar level that you can for devices in your facility. This includes deploying updates, security policy settings, and being able to monitor the system when it is connected to your VPN. You may even decide to restrict the use of printers to prevent employees from printing CUI at home.
NIST SP 800-171 & CMMC 2.0 3.10.6 Scenario(s):
- Scenario 1:
Your company allows its employees to work from home once a week. To ensure that the CUI on their systems is secure, you have configured the laptops in accordance with your secure baseline, you encrypt their laptops, require them to connect to them VPN upon logging into their system, and deploy all software updates as scheduled.
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.