IAM-30—Virtual Private Network
>Control Description
Remote connections to the corporate network are accessed via VPN through managed gateways.
Theme
Technology
Type
Preventive
Policy/Standard
Remote Access Procedure>Implementation Guidance
1. Design and document process for requirements of remote connection to corporate network. 2. Ensure all remote connections are via VPN.
>Testing Procedure
1. Inspect Remote Access Standard to determine whether requirements for remotely connecting to the corporate network were defined. 2. Inspect a user remotely connect to the Corporate Network via VPN.
>Audit Artifacts
E-IAM-19
E-IAM-43
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.