User's Guide to Telework and Bring Your Own Device (BYOD) Security

Souppaya, Murugiah; Scarfone, Karen

doi:https://doi.org/10.6028/NIST.SP.800-114r1

SP 800-114 Rev. 1

User's Guide to Telework and Bring Your Own Device (BYOD) Security

Documentation Topics

Date Published: July 2016

Supersedes: SP 800-114 (11/01/2007)

Author(s)

Murugiah Souppaya (NIST), Karen Scarfone (Scarfone Cybersecurity)

Abstract

Many people telework, and they use a variety of devices, such as desktop and laptop computers, smartphones, and tablets, to read and send email, access websites, review and edit documents, and perform many other tasks. Each telework device is controlled by the organization, a third party (such as the organization’s contractors, business partners, and vendors), or the teleworker; the latter is known as bring your own device (BYOD). This publication provides recommendations for securing BYOD devices used for telework and remote access, as well as those directly attached to the enterprise’s own networks.

Keywords

host security; information security; network security; remote access; bring your own device (BYOD); telework

Control Families

Access Control; Configuration Management; System and Communications Protection

Documentation

Publication:
SP 800-114 Rev. 1 (DOI)
Local Download

Supplemental Material:
None available

Related NIST Publications:
SP 800-46 Rev. 3 (Draft)
SP 800-46 Rev. 2

Document History:
03/14/16: SP 800-114 Rev. 1 (Draft)
07/29/16: SP 800-114 Rev. 1 (Final)

Topics

Security and Privacy
authentication

Technologies
networks

Applications
communications & wireless; telework

Laws and Regulations
Federal Information Security Modernization Act; OMB Circular A-130