MIB Family News
Question:
According to the FFIEC what measures should management employ to securely offer remote access?

Answer:
1. Disable remote communications if no business need exists.
   2. Tightly control remote access through management approvals and subsequent audits.
   3. Implement robust controls over configurations at both ends of the remote connection to prevent potential malicious use.
   4. Log and monitor all remote access communications.
   5. Secure remote access devices.
   6. Restrict remote access during specific times.
   7. Limit the applications available for remote access.
   8. Use robust authentication methods for access and encryption to secure communications.