To aid us with understanding policies in remote access security, this site has adopted a guidance policy prepared by the SANS Institute.
The scope of this policy applies to all company employees, contractors, vendors and agents with the company as owned or personally-owned computer or workstation used to connect to the company network. This policy also applies to remote access connections used to do work on behalf of a company, including reading or sending email and viewing intranet web resources.
Remote access implementations that are covered by this policy include, but are not limited to, dial-in modems, frame relay, ISDN, DSL, VPN, SSH, and cable modems, etc.
Basically, it is the responsibility of any company’s employees, contractors, vendors and agents with remote access privileges to their company’s corporate network to ensure that their remote access connection is given the same consideration as the user’s on-site connection to their company.
General access to the Internet for recreational use by immediate household members through the company’s Network on personal computers is permitted for employees that have flat-rate services. The employee is responsible to ensure the family member does not violate any company policies, does not perform illegal activities, and does not use the access for outside business interests. The employee bears responsibility for the consequences should the access be misused.
Below are policies for details of protecting information when accessing the
corporate network via remote access methods, and acceptable use of a particular company’s network:
a. Acceptable Encryption Policy
b. Virtual Private Network (VPN) Policy
c. Wireless Communications Policy
d. Acceptable Use Policy
4. For additional information regarding a company’s remote access connection options,
including how to order or disconnect service, cost comparisons, troubleshooting, etc., they can browse some sites by using the key phrase: remote access services.
We hope this segment has been successful. Thanks to the template in remote access security policy prepared by the SANS Institute. You may also adopt this policy or create your own with accordance to your company’s needs.