[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-6-7":3},{"item":4,"lessons":16,"controls":22,"related":35},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-6-7","Annex A 6.7","Remote working",1,"International Organization for Standardization (ISO) and IEC","**What it asks for.** Security measures should be in place when personnel work remotely, to protect information accessed, processed or stored outside the organisation's premises. Rules for remote working should be defined.\n\n**In practice.** A remote working policy sets out where work may be done, which devices may be used and how connections are secured, for example through managed devices, multi factor authentication and secure access services. It also covers home office matters such as privacy from others in the household, printing and disposal of paper. Working from other countries is addressed, since it can raise legal and data transfer issues. Evidence includes the policy, technical configurations, staff acknowledgements and training records.\n\n**Common gaps.** Policies written during emergency remote working are often never revisited. Unmanaged personal devices, home printers and staff working from abroad without approval are typical weaknesses.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18],{"slug":19,"title":20,"published_at":21},"usb-lnk-worm-deploys-crypto-clipper-via-tor-based-c2","USB LNK Worm Deploys Crypto Clipper via Tor-Based C2","2026-06-18T16:20:41.907+00:00",[23,27,31],{"slug":24,"name":25,"problem":26,"stories":9},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",{"slug":28,"name":29,"problem":30,"stories":9},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":32,"name":33,"problem":34,"stories":9},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[36,41,45,49,53,58,63,67],{"family":37,"item":38,"code":39,"title":40,"together":9},"cis","10","Control 10","Malware Defenses",{"family":37,"item":42,"code":43,"title":44,"together":9},"13","Control 13","Network Monitoring and Defense",{"family":37,"item":46,"code":47,"title":48,"together":9},"6","Control 6","Access Control Management",{"family":5,"item":50,"code":51,"title":52,"together":9},"a-8-19","Annex A 8.19","ISO\u002FIEC 27001:2022 Annex A 8.19: Installation of software on operational systems",{"family":54,"item":55,"code":56,"title":57,"together":9},"mitre-attack","t1115","T1115","Clipboard Data",{"family":59,"item":60,"code":61,"title":62,"together":9},"nist-800-53","au-12","AU-12","Audit Record Generation",{"family":59,"item":64,"code":65,"title":66,"together":9},"sc-18","SC-18","Mobile Code",{"family":59,"item":68,"code":69,"title":70,"together":9},"sc-7","SC-7","Boundary Protection"]