Extend your protections to home offices and other alternate work sites.
What it actually means
Enforce safeguarding measures for CUI at alternate work sites — home offices, co-working spaces, field locations. Remote work doesn't lower the bar: define how CUI is protected off-site (secured devices, no shared or family computers, screen privacy, locked storage).
Pass or fail — an assessor needs a "yes" to each
- Are safeguarding measures for CUI defined and enforced at alternate work sites such as home offices?
What to have ready
- Remote-work / telework security policy
- Evidence of enforced controls on remote devices
Where teams trip up
- No telework policy covering CUI
- Employees handling CUI on shared home computers
See where this control puts your score
Run all 110 requirements free in about 10 minutes — or draft your SSP language for this control. No signup.
Calculate your SPRS score →Draft your SSP language →