{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Network & Communications Security","Access Control & Identity Management","Data Protection & Privacy"],"inherent_rating":"high","taxonomy":["iso-27005-vulnerability","nist-800-30-threat-event"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Anet-remote-work-mobile-exposure","description":"Uncontrolled work outside the premises, split-tunneling, and exploitation of mobile devices/personal systems outside physical and firewall protection expose information through insecure environments and reintroduce compromised devices into the enterprise.","details":{"category":"cyber_security","impact":"medium","inherent_rating":"high","likelihood":"high","risk_id":"net-remote-work-mobile-exposure","taxonomies":["iso-27005-vulnerability","nist-800-30-threat-event"],"treatment":"mitigate"},"id":"risk:net-remote-work-mobile-exposure","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Anet-remote-work-mobile-exposure","sourceIds":["hipaa","iso-27001","nist-800-53","nist-ai-agent-identity","nist-csf-2","nydfs-500","pci-dss","soc2"],"sourceUrl":null,"title":"Remote-work, mobile and split-tunneling exposure","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:193b2b562c1251722c4e2025c121a33eb94a6c75c6a0d2b7d89c34842d421319","properties":{"rationale":"a remote-working policy mandating device, physical, and communications safeguards directly reduces off-premises data and device exposure","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-hr-07-7b9726ca.json","sourceId":"uc:UC-HR-07","targetDetailPath":"/data/v1/records/risk-net-remote-work-mobile-exposure-d7aab6d9.json","targetId":"risk:net-remote-work-mobile-exposure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3cf14e2ddbee81a224b96621b7542a97b250df4088c9fd0d3ff357f3a789569b","properties":{"rationale":"Mediating and monitoring all traffic at managed boundaries restricts unauthorized logical access reaching in from remote/mobile networks (mustKeep).","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-net-01-30bfdc5f.json","sourceId":"uc:UC-NET-01","targetDetailPath":"/data/v1/records/risk-net-remote-work-mobile-exposure-d7aab6d9.json","targetId":"risk:net-remote-work-mobile-exposure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4aa9422606d9d7c9b4dd311d484e6623d18475b48439149993fc9f3b1012f244","properties":{"rationale":"Enforced MFA for remote access reduces credential compromise from insecure off-premises environments.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-access-09-444baafe.json","sourceId":"uc:UC-ACCESS-09","targetDetailPath":"/data/v1/records/risk-net-remote-work-mobile-exposure-d7aab6d9.json","targetId":"risk:net-remote-work-mobile-exposure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4b2f0097dcf1944017c2814c5958d1e416499b1aceb4056c1db36a2931f2a8ba","properties":{"rationale":"Requiring verifiable device credentials to connect blocks reintroduction of untrusted or compromised devices.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-access-10-130762ce.json","sourceId":"uc:UC-ACCESS-10","targetDetailPath":"/data/v1/records/risk-net-remote-work-mobile-exposure-d7aab6d9.json","targetId":"risk:net-remote-work-mobile-exposure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:882b2dcd33aa7402e887b3ecca36b20c92a1e58bd219b380698c02684af44a73","properties":{"rationale":"Explicit authorization, usage/connection restrictions, and encryption for each remote/wireless/mobile connection is the operative control for insecure remote and mobile access.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-net-02-6e84b235.json","sourceId":"uc:UC-NET-02","targetDetailPath":"/data/v1/records/risk-net-remote-work-mobile-exposure-d7aab6d9.json","targetId":"risk:net-remote-work-mobile-exposure","type":"mitigates"}],"schemaVersion":1}