Remote Access
What is Remote Access?
Technology and processes enabling authorized users to connect to organizational networks and resources from external locations securely.
Terms that appear alongside remote access
Each of these is named in at least one of the same controls as remote access. The number is how many controls name both.
- authentication 34 shared controls
- access control 32 shared controls
- multi factor authentication 21 shared controls
- access management 20 shared controls
- nist 18 shared controls
- least privilege 13 shared controls
- privileged access management 13 shared controls
- role based access control 8 shared controls
Frameworks that govern remote access
What the standards actually require on remote access
Requirements naming remote access across 6 standards, quoted from the control text.
For all Interactive Remote Access sessions, use encryption that terminates at an Intermediate System.
nerc-cip::CIP-005 R2.2 · CIP-005-7 R2.2: Encryption of Interactive Remote Access terminating at the Intermediate System →Route remote accesses through authorized and managed network access control points.
NIST800-AC-17(3) · AC-17(3) Remote Access | Managed Access Control Points →Where a third party reaches, supports or maintains system components remotely, the accounts it uses must be: switched on only for as long as needed and switched off when idle; and monitored for unexpected activity.
8.2.7 · 8.2.7 Third-party remote access accounts controlled →Some IT and OT systems run continuous internet connections for monitoring, data collection, maintenance, safety and security, often as third-party systems with two-way or upload-only data flow, for example bridge and engine room workstations on the admin netwo...
BIMCO-3.6 · Remote access →Policies define how remote access by employees on institution or personal devices is provided and secured: disabled where no business need exists, tightly controlled through management approval and audit, robust configuration control at both ends, logging and...
ffiec-it-examination-handbook::IS-II.C.15(c) · II.C.15(c) Remote Access (Information Security) →Route remote access through authorized and managed network access control points.
fbi-cjis-security-policy::AC-17(3) · AC-17(3) Remote Access | Managed Access Control Points →Questions people ask about remote access
What is Remote Access?
Why is Remote Access important for compliance?
Which compliance frameworks address Remote Access?
Where can I learn more about Remote Access?
See how Remote Access applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.