STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.
← All Controls

PE-17

Physical and Environmental ProtectionRev 5organization

Alternate Work Site

Baselines:ModerateHigh

Control Statement

a. Determine and document the [Assignment: alternate work sites] allowed for use by employees; b. Employ the following controls at alternate work sites: [Assignment: controls]; c. Assess the effectiveness of controls at alternate work sites; and d. Provide a means for employees to communicate with information security and privacy personnel in case of incidents.

Supplemental Guidance

Alternate work sites include government facilities or the private residences of employees. While distinct from alternative processing sites, alternate work sites can provide readily available alternate locations during contingency operations. Organizations can define different sets of controls for specific alternate work sites or types of sites depending on the work-related activities conducted at the sites. Implementing and assessing the effectiveness of organization-defined controls and providing a means to communicate incidents at alternate work sites supports the contingency planning activities of organizations.

Related Controls (3)

AC-17AC-18CP-7

CCI Identifiers (7)

CCI-002975Defines controls to employ at alternate work sites.CCI-000985Employ organization-defined controls at alternate work sites.CCI-000986The organization defines management, operational, and technical information system security controls to be employed at alternate work sites.CCI-000987Assess as feasible, the effectiveness of controls at alternate work sites.CCI-000988Provide a means for employees to communicate with information security personnel in case of incidents.CCI-004262Determine and document the organization-defined alternate work sites allowed for use by employees.CCI-004263Provide a means for employees to communicate with information privacy personnel in case of incidents.

Linked STIG Checks (0)

No STIG checks reference this control.