Which policy defines who can have remote access?

Which policy defines who can have remote access?

• A. Access Control Policy
• B. Remote-Access Policy
• C. User- Account Policy
• D. Information-Protection Policy

Answer: (B)

Remote access policy defines who can establish remote connections to the organization’s network and under what conditions. It specifies authorized users, the remote methods allowed (such as VPN, SSH, or remote desktop), required authentication (often multi-factor), approved devices, and any usage constraints or monitoring. This policy ensures that only vetted individuals can access systems remotely and that such access is controlled, auditable, and revocable. Other policies deal with broader access controls, account lifecycles, or data protection, but they don’t specify who is permitted to connect remotely in the concrete, enforceable way the remote access policy does.

Remote access policy defines who can establish remote connections to the organization’s network and under what conditions. It specifies authorized users, the remote methods allowed (such as VPN, SSH, or remote desktop), required authentication (often multi-factor), approved devices, and any usage constraints or monitoring. This policy ensures that only vetted individuals can access systems remotely and that such access is controlled, auditable, and revocable.

Other policies deal with broader access controls, account lifecycles, or data protection, but they don’t specify who is permitted to connect remotely in the concrete, enforceable way the remote access policy does.