PE-17: Alternate Work Site

alternate work sites are determined and documented;

controls are employed at alternate work sites;

the effectiveness of controls at alternate work sites is assessed;

a means for employees to communicate with information security and privacy personnel in case of incidents is provided.

Physical and environmental protection policy

procedures addressing alternate work sites for organizational personnel

list of security controls required for alternate work sites

assessments of security controls at alternate work sites

system security plan

privacy plan

other relevant documents or records

Organizational personnel approving the use of alternate work sites

organizational personnel using alternate work sites

organizational personnel assessing controls at alternate work sites

organizational personnel with information security and privacy responsibilities

Organizational processes for security and privacy at alternate work sites

mechanisms supporting alternate work sites

security and privacy controls employed at alternate work sites

means of communication between personnel at alternate work sites and security and privacy personnel