S 3.22 Regulations concerning substitution of telecommuters

Initiation responsibility: IT Security Management, Superiors

Implementation responsibility: Telecommuter

In addition to safeguard M 3.3 Arrangements for substitution, further measures are required if a telecommuter needs to be substituted. As telecommuters work mainly outside the institution, an information flow between them and their stand-ins must be guaranteed. Documentation of the results of work performed by telecommuters is also indispensable. In addition, it might be advisable for telecommuters and their stand-ins to meet on a sporadic or regular basis.

It is also necessary to prepare regulations on how stand-ins are to access data and documents from telecommuting workstations should the need for this arise unexpectedly.

Additional controls:

• Have stand-ins for telecommuters been appointed?

• Have test substitutions been performed?