{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Human Resources / Personnel Security","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-HR-07","description":"A remote-working policy defines the physical, device, and communications security measures required when personnel work outside organizational premises, including screen privacy, secured work environments, encrypted connectivity, and rules for handling sensitive information remotely. Compliance is attested, and equipment and configuration requirements are enforced before remote access is granted.","details":{"control_category":"administrative","control_type":"preventive","domain":"Human Resources / Personnel Security","guidance":[],"members":[{"control_id":"A.6.7","coverage":"full","framework":"iso-27001","relationship":"equal"}],"statement":"A remote-working policy defines the physical, device, and communications security measures required when personnel work outside organizational premises, including screen privacy, secured work environments, encrypted connectivity, and rules for handling sensitive information remotely. Compliance is attested, and equipment and configuration requirements are enforced before remote access is granted.","title":"Secure remote working arrangements","unified_id":"UC-HR-07"},"id":"uc:UC-HR-07","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-HR-07","sourceIds":["iso-27001"],"sourceUrl":null,"title":"UC-HR-07 — Secure remote working arrangements","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:193b2b562c1251722c4e2025c121a33eb94a6c75c6a0d2b7d89c34842d421319","properties":{"rationale":"a remote-working policy mandating device, physical, and communications safeguards directly reduces off-premises data and device exposure","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-hr-07-7b9726ca.json","sourceId":"uc:UC-HR-07","targetDetailPath":"/data/v1/records/risk-net-remote-work-mobile-exposure-d7aab6d9.json","targetId":"risk:net-remote-work-mobile-exposure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:299a71aeeee59776f5b1a4c8f9fcfda488340adee65b5850e013858a95e1eada","properties":{"control_id":"A.6.7","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-hr-07-7b9726ca.json","sourceId":"uc:UC-HR-07","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-7-74bc3cd8.json","targetId":"ctrl:iso-27001:A.6.7","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b4402e261f67d5b17bc238f09b23b29ae15d95d1fcf277053fde553a184b4d51","properties":{},"sourceDetailPath":"/data/v1/records/wf-g9-d1e65641.json","sourceId":"wf:G9","targetDetailPath":"/data/v1/records/uc-uc-hr-07-7b9726ca.json","targetId":"uc:UC-HR-07","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bc21219f0a53c442e51eb7351c19653f633786b0fd82e105fa796e0a0961bc9f","properties":{},"sourceDetailPath":"/data/v1/records/wf-c34-d94fc91f.json","sourceId":"wf:C34","targetDetailPath":"/data/v1/records/uc-uc-hr-07-7b9726ca.json","targetId":"uc:UC-HR-07","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d5f93a187ee7bedd79620ef2ca9970631b3add2a86d78b8f7cd6d782a57f8521","properties":{"rationale":"the remote-working policy drives role-specific secure-working awareness for off-site staff","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-hr-07-7b9726ca.json","sourceId":"uc:UC-HR-07","targetDetailPath":"/data/v1/records/risk-aware-role-based-training-gap-3e2ca2c3.json","targetId":"risk:aware-role-based-training-gap","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e21610ad09ea2907d8b0e202d304b92bba2194e2af5621f208acbc053316a1ab","properties":{},"sourceDetailPath":"/data/v1/records/wf-d06-c9616fb8.json","sourceId":"wf:D06","targetDetailPath":"/data/v1/records/uc-uc-hr-07-7b9726ca.json","targetId":"uc:UC-HR-07","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ed03fa85bf7dc717f2b779b2f5259958c018f6fb0ecc5b0119ac7fe3851f1d97","properties":{},"sourceDetailPath":"/data/v1/records/wf-c7-acbef2ee.json","sourceId":"wf:C7","targetDetailPath":"/data/v1/records/uc-uc-hr-07-7b9726ca.json","targetId":"uc:UC-HR-07","type":"oversees"}],"schemaVersion":1}