A.18.1.3: Protection of Records
Ensure that records are protected from loss, destruction, falsification, unauthorized access, and unauthorized release.
A.13.1.2: Security of Network Services
Ensure that security features, service levels, and management requirements of all network services are identified and included in network services agreements, whether these services are provided in-house or outsourced.
A.13.1.1: Network Controls
Implement network controls to manage and control the network, including any remote access.
A.7.1.1: Screening
Ensure that background verification checks on all candidates for employment, contractors, and third-party users are carried out.
Teleworking
Develop a policy and supporting security measures to protect information accessed, processed, or stored at teleworking sites.