Organizational Control: Alternate Work Site

Control ID: PE-17 Alternate Work Site Family: Physical and Environmental Protection Source: NIST 800-53r4
Control: The organization:
  1. Employs [Assignment: organization-defined security controls] at alternate work sites;
  2. Assesses as feasible, the effectiveness of security controls at alternate work sites; and
  3. Provides a means for employees to communicate with information security personnel in case of security incidents or problems.
Supplemental Guidance:
Alternate work sites may include, for example, government facilities or private residences of employees. While commonly distinct from alternative processing sites, alternate work sites may provide readily available alternate locations as part of contingency operations. Organizations may define different sets of security controls for specific alternate work sites or types of sites depending on the work-related activities conducted at those sites. This control supports the contingency planning activities of organizations and the federal telework initiative.

Related Controls: AC-17, CP-7
Control Enhancements: N/A
References: NIST Special Publication 800-46.
Mechanisms:
Protocol Implementation Conformance Statements: N/A