IT Contractors' Remote Access  Document code:  POL-0016.04  Security level:  Internal  Effective date:  30/06/2020  a. The traffic between the client device and the  Contractor’s  network shall be  adequately protected by encryption, i.e. a secure VPN connection must be  established. b. Only authorised telework users using authorised devices can establish a secure  connection. Therefore, both users and the devices used for teleworking must be  reliably authenticated 4  (as with two-factor user authentication and secure  device authentication).  c. Any build-in data storage (e.g. HDD, SSD) of client devices for teleworking shall  be adequately encrypted.  d. A client firewall must be enabled with reasonably restrictive (especially  inbound) rules. When a VPN connection is established, the applications (if any)  that are allowed to initiate outbound connections must be controlled.  $^{4}$  For example, using pre-installed certificates TEM-0129.01  Uncontrolled copy once printed. Ensure that the right version is in use.  Page  22  of  22