|
Article 6
|
(Remote Access)
- An organization shall prescribe remote connection regulations setting forth restrictions on use, configuration requirements, connection requirements, and documentation. Prior authorization shall be obtained, and records kept, for any type of remote access permitted.
- An organization shall complete at server side the verification of an authorized log-in of the information and communication system account.
- An organization shall monitor the connection of an external network that remote-connects and accesses the organization’s internal network segment.
- The information and communication system shall use an encrypted connection mechanism.
- The source of remote access to the information and communication system shall be an access control point approved by the organization.
|