Mobile devices and teleworking
MedStack Confidential
Metadata
- responsible officer: CTO
- approved by: CTO
- date
- effective: 2018-06-20
- revised: 2020-06-18
- reviewed: 2022-08-31
- Applicability: standard
Be secure while teleworking
- Secure home telework spaces in accordance with Secure Areas policy.
- When entering or displaying sensitive information, protect the keyboard and screen from view by others.
- Use only secure wireless networks.
| Code | Section | Title |
|---|---|---|
| ISO | A.6.2.2 | Teleworking |
Mobile devices
- Secure mobile devices
- in accordance with the Workstation policy
- both personal and company-owned
- against theft by carrying or leaving in a safe place
- against wireless attacks (such as attacks using WiFi, Bluetooth, and NFC)
- Only use mobile devices
- that can be secured effectively
| Code | Section | Title |
|---|---|---|
| ISO | A.6.2.1 | Mobile device policy |
| SOC2 | CC6.7 | The entity restricts the transmission, movement, and removal of information to authorized internal and external users and processes, and protects it during transmission, movement, or removal to meet the entity’s objectives. |
Enforcement
- Responsible party: All managers and supervisors
- sanctions: standard
References
| Code | Section | Title |
|---|---|---|
| ISO | A.6.2 | Mobile devices and teleworking |
| ISO | A.11.2.6 | Security of equipment and assets off-premises |