NIST SP 800-171 & CMMC 2.0 Control 3.10.6 Requirement:
Enforce safeguarding measures for “Controlled Unclassified Information” (CUI) at alternate work sites.
NIST SP 800-171 & CMMC 2.0 3.10.6 Requirement Explanation:
It is not uncommon for employees to work from home. An employee's home is an "alternate worksite". Other alternate work sites may include government facilities and client sites. This practice seeks to ensure that you still protect CUI outside of your facility.
Example NIST SP 800-171 & CMMC 2.0 3.10.6 Implementation:
Encrypt your remote computers and all laptops to protect CUI. Ensure that you can deploy software and security updates to your remote employee's systems. Have the capability to secure remote systems at the same or similar level that you can for devices in your facility. This includes deploying updates, security policy settings, and being able to monitor the system when it is connected to your VPN. You may even decide to restrict the use of printers to prevent employees from printing CUI at home.
NIST SP 800-171 & CMMC 2.0 3.10.6 Scenario(s):
- Scenario 1:
Your company allows its employees to work from home once a week. To ensure that the CUI on their systems is secure, you have configured the laptops in accordance with your secure baseline, you encrypt their laptops, require them to connect to them VPN upon logging into their system, and deploy all software updates as scheduled.
Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:
Compliance Accelerator
Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.
Quantum Assessor
Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.
Supply Chain Verifier
Trust is everything. Verify, monitor, and support subcontactor compliance.