HRS-14
Identifying Authorized Work Locations
Description
Mechanisms exist to identify and document authorized working locations, including: (1) Designated on-premises, organization-controlled work locations; and (2) Other off-premises locations not under organization-control (e.g., work from home).
Control Question
Does the organization identity and document authorized working locations, including: (1) Designated on-premises, organization-controlled work locations; and (2) Other off-premises locations not under organization-control (e.g., work from home)?
Control Metadata
Domain:
Human Resources Security
Validation Cadence:
Annual