Does your organization establish remote access policy which includes the use of VPN, restriction from copying scoped data from production systems, enforcing 2 factor authentication and session monitor?

Please pick all the policies which exist in your company, reviewed and approved annually by senior management.

Please attach the policies.

Does senior management actively support information security within the business by providing clear direction and budgeted commitment?

Is information security represented across all parts of the Organization?

Do you have a mobile device management solution deployed which provides secure container for corporate data, password policy and remote wipe?

Does your organization established remote access policy which includes the use of VPN, restriction from copying scoped data from production systems, enforcing 2 factor authentication and session monitor?

Has a procedure been established for remote workers to get access?

A.6.1.5 Information security in project managementDo all projects address information security in their project management?

A.6.2.1 Mobile device policyHas the organization established a mobile device policy?