In today's evolving work landscape, the concept of remote work has gained unprecedented prominence, driven by technological advancements, fueled by the pandemic and further changing societal norms. As organizations increasingly embrace flexible work arrangements, ensuring the security and integrity of remote work environments becomes a paramount concern. The National Secure Remote Work Policy is designed to address these challenges by establishing a comprehensive set of minimum requirements that enables employees to work remotely while upholding data confidentiality, safeguarding digital assets, and maintaining operational resilience. This policy outlines the principles and guidelines necessary to create a secure remote work ecosystem that empowers employees and protects the organization from potential cyber security risks.

 

The Council has established this policy to enhance remote work security, aligned with the UAE’s national priority to be a global leader in cyber security; and enhance the security posture of organizations and individuals within the UAE utilizing remote work arrangements.

Governance:

Establishes the necessary governance to support secure remote work requirements. It focuses on identifying, assessing, mitigating, and monitoring remote work risks within the overall risk management program, and ensuring remote workers are aware of cybersecurity and risk practices.

 

Organization Remote Access Security

Requirements to ensures a secure remote access environment by adopting a Zero Trust approach, maintaining a robust infrastructure, and promoting secure practices. It includes secure authentication and authorization of remote workers and managing remote worker access throughout its lifecycle.

 

Client Device Security

Security measures to implement appropriate security controls on devices provided by the organization, mobile devices, and third-party or Bring Your Own Device (BYOD) devices.

 

Data Security During Remote Work

Requirements to protect the residency and sovereignty of organization data during remote work, ensuring data protection during transfer, and adhering to all relevant legal, regulatory, and contractual obligations.