content_image/476789.jpg
<img src='content_image/476789.jpg'>

a. The traffic between the client device and the Contractor’s network shall be adequately protected by encryption, i.e. a secure VPN connection must be established. 

b. Only authorised telework users using authorised devices can establish a secure connection. Therefore, both users and the devices used for teleworking must be reliably authenticated 4  (as with two-factor user authentication and secure device authentication). 

c. Any build-in data storage (e.g. HDD, SSD) of client devices for teleworking shall be adequately encrypted. 

d. A client firewall must be enabled with reasonably restrictive (especially inbound) rules. When a VPN connection is established, the applications (if any) that are allowed to initiate outbound connections must be controlled. 

