PE.L2-3.10.6—Alternative Work Sites
Level 2
800-171: 3.10.6
>Control Description
Enforce safeguarding measures for CUI at alternate work sites.
>Cross-Framework Mappings
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What is your policy for alternate work sites (telework, remote work)?
- •What safeguards are required for CUI at alternate work sites?
- •How do you verify alternate work sites meet security requirements?
- •What is your process for approving alternate work site arrangements?
- •How do you monitor compliance with alternate work site security requirements?
Technical Implementation:
- •What VPN or remote access technologies support alternate work sites?
- •What endpoint security protects alternate work site devices?
- •What tools verify security controls on alternate work site systems?
- •What DLP prevents CUI leakage from alternate work sites?
- •What monitoring tools oversee alternate work site security?
Evidence & Documentation:
- •What physical security policies and procedures can you provide?
- •What physical access logs demonstrate access control?
- •What visitor logs show visitor escort and monitoring?
- •What badge issuance records track physical access devices?
- •What surveillance footage or monitoring logs can you show?
- •What evidence shows physical security controls are functioning?
- •What alternate work site approval documentation can you provide?
Ask AI
Configure your API key to use AI features.