IT Examiner School - Oct 2023

Internal Use Only

Remote Access Control remote access through approvals & periodic audits

Limit applications available for remote access, restrict their access during specific times & disable remote communications if no business need exists Use robust authentication methods for access & encryption to secure communications

Log & monitor all remote access communications

Secure remote access devices

51

Internal Use Only

Virtual Private Networks (VPN) Provides employees (and vendors) with a remote connection to the institution's network through a secure channel A VPN connection uses public telecommunication infrastructure, such as the Internet, to provide remote offices or individual users with secure access to their employers' network Provides an encrypted isolated "tunnel" or connection between a remote user's computer & the internal network

Connections require additional authentication from the user, which is usually obtained through an OTP

52