Hi All,
The purpose of this document is to help federal civilian agencies address the telework surge concerns by:
• Providing awareness that the security patterns outlined under Agency Teleworker Options 1 and 2 (below) align
to TIC architecture capabilities as presented in the draft TIC 3.0 guidance (December 2019).
o Agencies should ensure that appropriate data sharing is maintained with Agency Security
Operations Centers.
o Agencies should be prepared to discuss the availability of log and telemetry features in order to
determine what relevant information will need to be provided to CISA for cybersecurity analytical
purposes.
• Informing agencies that the interim guidance provided under Agency Teleworker Option 3 provides additional
temporary relief with additional security patterns.
• Suggesting security capabilities for agencies to consider when creating or expanding their teleworking
platforms.
• Allowing vendors to map the cybersecurity capabilities provided by their services to the TIC security capabilities
that support secure teleworking
------------------------------
Michael Roza CPA, CISA, CIA
------------------------------