NIST Telework Guide updated
The National Institute of Standards and Technology (NIST) has just released an update of their draft recommendations on Enterprise Telework and Remote Access Security (PDF). The document provides a good backgrounder for anybody responsible for managing remote access in their organization. Interestingly the document is not too keen on remote desktop as a remote access method.
“remote desktop access solutions should only be used for exceptional cases after a careful analysis of the security risks. The other types of remote access solutions described in this section offer superior security capabilities”
I must admit that I would agree with this assessment. For a SOHO environment remote desktop can be an excellent choice but where there is a need to have any level of monitoring and control, then remote desktop can create more problems than it solves.
Leave a Reply