Remote working policy
The conditions under which people work away from the organisation's premises: the equipment, the connection, the physical setting and the data they may take.
How the register reads it
| Also called | teleworking, working from home, WFH |
|---|---|
| Family | People |
| Document type | Policy. The regimes ask for the content, not the label; a line pasted as a standard, procedure, plan or schedule is placed here with the label noted. |
| Expected owner | The information security lead (CISO or ISMS manager). |
| Review cadence | Annual (the register's default: the clauses say planned intervals and on significant change, and do not fix a period). |
| On the gap list when | ISO 27001 is ticked and no line resolves to it. |
| Template | Remote work security policy. |
Which standards require it, and what each expects it to contain
1 requiring clauses, 1 regimesShown on a register for the regimes you tick; with none ticked, ISO 27001 is applied. Requirement text drawn from a human-verified compliance corpus under licence: the corpus statement of each clause, not the instrument verbatim.
ISO/IEC 27001:2022
ISO 27001 6.7 Remote workingApply security measures when people access, process or store information outside the organization's premises.
What the ISO 27002 guidance expects the document to say: Requires security measures to be implemented when personnel work remotely, protecting information that is accessed, processed or stored outside the organisation's premises.
Common gap: Missing MFA for remote access
Source: ISO/IEC 27001:2022; guidance ISO/IEC 27002:2022
Do this for every document on your list
Paste the list and get this reading for every document at once, with the owner and cadence against each, the clauses quoted, and the documents the regimes expect that the list does not carry. Eight documents free, no account.
Build a registerOffboarding and termination procedure · Security awareness and training policy