Back

Include alternate work locations in the pandemic plan.


CONTROL ID
14376
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a pandemic plan., CC ID: 13214

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Where people will work – including staying home with or bringing kids to work (4.4(b), Pandemic Response Planning Policy)
  • Determine and document the [Assignment: organization-defined alternate work sites] allowed for use by employees; (PE-17a., FedRAMP Security Controls High Baseline, Version 5)
  • Determine and document the [Assignment: organization-defined alternate work sites] allowed for use by employees; (PE-17a., FedRAMP Security Controls Moderate Baseline, Version 5)
  • Determine and document the [Assignment: organization-defined alternate work sites] allowed for use by employees; (PE-17a., Control Baselines for Information Systems and Organizations, NIST SP 800-53B, High Impact Baseline, October 2020)
  • Determine and document the [Assignment: organization-defined alternate work sites] allowed for use by employees; (PE-17a., Control Baselines for Information Systems and Organizations, NIST SP 800-53B, Moderate Impact Baseline, October 2020)
  • Determine and document the [Assignment: organization-defined alternate work sites] allowed for use by employees; (PE-17a., Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations, NIST Special Publication 800-161, Revision 1, Appendix A, C-SCRM Level 3 Controls)
  • Determine and document the [Assignment: organization-defined alternate work sites] allowed for use by employees; (PE-17a., Security and Privacy Controls for Information Systems and Organizations, NIST SP 800-53, Revision 5)
  • Determine and document the [Assignment: organization-defined alternate work sites] allowed for use by employees; (PE-17a., Security and Privacy Controls for Information Systems and Organizations, NIST SP 800-53, Revision 5.1.1)