Procurement Intelligence Briefing

NIST: Time to take telework's cyber risks seriously

Published: March 16, 2016•1 min read•GovPurchase Research Desk
Key Intelligence Takeaways

This briefing covers active market intelligence, regulatory guidelines, and tactical capture recommendations for federal and defense contractors pursuing opportunities in this procurement classification.

Federal teleworkers present an inviting target for hackers, according to NIST researchers. Information gleaned from teleworkers devices can provide attack vectors for those targeting federal IT systems.

“Organizations are realizing that many data breaches occur when attackers can steal important information from a network by first attacking computers used for telework,” said NIST computer scientist Murugiah Souppaya.

Two draft publications were released on March 11: the Guide to Enterprise Telework, Remote Access, and Bring Your Own Device Security and the User’s Guide to Telework and Bring Your Own Device Security.  In them, Souppaya and fellow NIST researcher Karen Scarfone advise organizations to assume that external environments contain hostile threats. NIST advises using multi-factor authentication for enterprise access. In case a device gets lost or stolen, organizations should encrypt the device’s storage and all sensitive data stored on user devices, or refrain from storing sensitive data on devices at all.

Read More

Market Intelligence Platform

Want the Full Solicitation & Recompete Pipeline on This Topic?

GovPurchase tracks 1.2M+ active and historical records, contracting officers, and expiring awards.