CCI-000987

Implementation Guidance

The organization being inspected/assessed must implement procedures to assess, when feasible, the effectiveness of the documented alternate work site security controls. The organization must document results of conducted assessments as part of an audit trail. Alternate work sites are further defined in the definitions associated with this implementation guide.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines: 1. The procedures for assessing the effectiveness of alternate work site security controls. 2. The audit records of assessments they have conducted of security controls effectiveness for alternate work sites.

Compelling Evidence

1.) Telework policy, Telework Agreement, or other similar documentation containing organizationally-defined security controls 2.) Records of assessments of effectiveness of security controls, if feasible