2023 IT Examiner School

Internal Use Only

Encryption

Data in Transit

Data at Rest

Data in Use

Internal Use Only

Remote Access Control remote access through approvals & periodic audits

Limit applications available for remote access, restrict their access during specific times & disable remote communications if no business need exists Use robust authentication methods for access & encryption to secure communications

Log & monitor all remote access communications

Secure remote access devices