Skip to content

Remote Access VPN

What is Remote Access VPN?

A virtual private network that allows individual users to connect to a private network from a remote location over the internet. Remote access VPNs encrypt all traffic between the user's device and the corporate network.

Information Security

Terms that appear alongside remote access vpn

Each of these is named in at least one of the same controls as remote access vpn. The number is how many controls name both.

Frameworks that govern remote access vpn

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →CIS Controls v8View framework →

What the standards actually require on remote access vpn

Requirements naming remote access vpn across 4 standards, quoted from the control text.

HKMA TM-G-11 control

HKMA TM-G-1 Information Security Programme. Comprehensive technical + administrative + physical security controls. (1) INFORMATION SECURITY PROGRAMME (TM-G-1.6.1) - documented + Board-approved information security programme + governance + roles + ISMS-style al...

HKMA-TMG1-InfoSec-Access-PAM-Network-Crypto-DLP-Endpoint · TM-G-1 Information Security Programme + Access + PAM + Network + Crypto + DLP + Vulnerability + Endpoint →
Kuwait National Cybersecurity Framework1 control

Kuwait NCF Protect function (Infrastructure). Network Security and Segmentation: defense in depth + perimeter (firewall + WAF + DDoS mitigation) + internal segmentation (microsegmentation + VLAN + zero-trust network access ZTNA) + east-west traffic inspection...

KNCF-Protect-Network-Configuration-Vulnerability-Physical-Secure-SDLC-Hardening-Patching-Drift · Kuwait NCF Protect + Network + Configuration + Vulnerability + Physical + Secure SDLC →
NIST SP 800-1231 control

Apply Section 6.3 network security including: network segmentation per NIST SP 800-207 Zero Trust + microsegmentation + DMZ + jump servers + bastion hosts + perimeter firewalls + host-based firewalls + IDS/IPS + DDoS protection + DNS security (DNSSEC + DoH) +...

NISTSP123-6 · Network Security and Server Communications →
New Zealand Information Security Manual (NZISM)1 control

Before switching on inverse split tunnelling in remote access VPN systems, agencies must carry out a threat and risk assessment of its use.

new-zealand-information-security-manual-nzism::18.7.14.C.01 · 18.7.14.C.01 Threat and risk assessment before enabling inverse split tunnelling →

Questions people ask about remote access vpn

What is Remote Access VPN?
A virtual private network that allows individual users to connect to a private network from a remote location over the internet. Remote access VPNs encrypt all traffic between the user's device and the corporate network.
Why is Remote Access VPN important for compliance?
Remote Access VPN is a key concept in Information Security. Understanding remote access vpn helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Remote Access VPN?
Remote Access VPN appears in the requirement text of HKMA TM-G-1, Kuwait National Cybersecurity Framework, NIST SP 800-123, New Zealand Information Security Manual (NZISM). Across these standards we have identified 4 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Remote Access VPN?
Explore our compliance framework pages to see how remote access vpn applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Remote Access VPN applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.