Requirement
In addition to the sub-controls within control 1-10-3 in the ECC, the cybersecurity awareness program must cover the awareness about the potential cyber risks and threats related to telework, including the following:
Sub-Controls
1-3-1-1
Requirement: Secure use of telework devices and how to protect them.
1-3-1-2
Requirement: Secure handling of identities and passwords.
1-3-1-3
Requirement: Protection of the stored data on the telework devices, and to be handled based on its classification.
1-3-1-4
Requirement: Secure handling of applications and solutions used for telework such as: virtual conferencing and collaboration, and file sharing solutions.
1-3-1-5
Requirement: Secure handling of home networks, making sure it is configured in a secure way.
1-3-1-6
Requirement: Avoidance of teleworking using unreliable public devices or networks or while in public places.
1-3-1-7
Requirement: Unauthorized physical access, loss, theft, and sabotage of technical assets and telework systems.
1-3-1-8
Requirement: To Communicate directly with the cybersecurity department If a cybersecurity threat is suspected.
References
- ECC – 2:2024 equivalent: 1-10-3
