IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
S 2.114 Flow of information between the
telecommuter and the institution
Initiation responsibility: Superiors, telecommuters
Implementation responsibility: Superiors, telecommuters
To keep telecommuters aware of internal affairs, superiors should ensure a
regular exchange of information between telecommuters and their colleagues.
Keeping telecommuters aware of plans and objectives in their areas of activity
is important, in order to prevent frustration and create and maintain a positive
telecommuting atmosphere.
The involvement of telecommuters in the distribution of internal circulars,
pertinent information and periodicals should be regulated. This might prove
problematic in the case of telecommuters who work exclusively from home.
One possible solution here would be to scan important documents and then
transmit them to the telecommuter via e-mail. Telecommuters also need to be
informed about changes to IT security measures.
Furthermore, colleagues of telecommuters need to be notified of their periods
of availability, e-mail address, and telephone number.
In addition, the following issues concerning telecommuting need to be
clarified:
- Who is to be contacted on the occurrence of a problem during
telecommuting?
- Who needs to be notified of security-relatedincidents?
- How are tasks to be allocated?
- How are the results of completed tasks to be transferred?
If technical or organisational problems occur, they must be reported
immediately by the telecommuter to the institution.
Additional controls:
- How is the telecommuter informed about business-related affairs?
- To whom does the telecommuter report security-related incidents?
- Who is the contact person (independent of the superior) for the
telecommuter?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000