2312.0—2312.0
>Control Description
The Supplier shall employ technical security controls and educate users to reduce the security risks to employees while working outside the organisation's premise. Technical security controls for consideration may include, but are not limited to:
i) Always-on VPN to protect data in-transit
ii) Screen privacy protector to prevent shoulder surfing
iii) Disabling USB ports on devices
iv) Full disk encryption
User awareness topics may include, but are not limited to:
i) Risks of using public Wi-Fi
ii) Avoid taking confidential phone calls within earshot of unauthorised individuals
iii) Shoulder surfing
iv) Avoid leaving devices unattended
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.