Mobile computing and teleworking

Objective: To ensure information security when using mobile computing and teleworking facilities.

When using mobile computing appropriate protection should be considered and implemented based on an assessment of the risks.

Mobile computing and communications

A formal policy should be adopted that takes into account the risks of working with mobile computing facilities (including all portable communications devices - not just laptop computers) , especially if they are to be used in unprotected environments.

Teleworking

A suitable policy with supporting controls should be in place for all teleworking sites. All teleworking must be both authorised and managed appropriately by management.