IT Baseline Protection Manual - The Information Warfare Site

Non-Networked Systems and Clients
_________________________________________________________________________________________
4.5 Working place at home
(Telecommuting)
Description
If professional tasks are performed at home instead of a
company or institute, appropriate measures must be taken to
achieve a degree of security comparable with that prevailing
on office premises. A home environment does not normally
provide the security infrastructure present on the premises of
a company or institute. Visitors and family members often
have access to a home workstation. This chapter describes the threats and safeguards pertaining
typically to home workstations. Such a workstation can be used, for example, by regular employees
for the purpose of telecommuting, as well as by freelancers and self-employed people.
Threat Scenario
The following typical threats are assumed as regards IT baseline protection of a working place at
home:
Force Majeure
- T 1.4 Fire
- T 1.5 Water
Organisational shortcomings:
- T 2.1 Lack of, or insufficient, rules
- T 2.6 Unauthorised admission to rooms requiring protection
- T 2.14 Impairment of IT usage on account of adverse working conditions
- T 2.47 Insecure transport of files and data media
- T 2.48 Inadequate disposal of data media and documents at the home work place
Human Failure:
- T 3.6 Hazards posed by cleaning staff or outside staff
Deliberate Acts:
- T 5.1 Manipulation/destruction of IT equipment or accessories
- T 5.2 Manipulation of data or software
- T 5.3 Unauthorised entry into a building
- T 5.69 Higher risk of theft from a working place at home
- T 5.70 Manipulation by family members or visitors
- T 5.71 Loss of confidentiality of classified information
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000