4.1 Baseline for Remote/Hybrid Work – Remote Work Policy

Needed capacities or functions - Remote Work Policy

Have a remote work policy in place when offering remote or hybrid options for staff. The policy should define the following: 

  1. the purpose of the remote work policy and benefits; 

  2. what remote work looks like for the organization; 

  3. the technology being provided to support remote work; 

  4. contact who can answer any questions about resources and information; 

  5. if remote work stipends or equipment will be offered; 

  6. contact for technical issues; 

  7. core hours and working hours, which can impact technology and IT support response times (e.g., IT support availability, backups running, bandwidth); and  

  8. home base location and temporary work location protocols. 

Important Considerations and Best Practices 

The organization should determine how to develop its remote work policy and whether to incorporate cybersecurity elements. Some organizations may opt to have more standalone security policies or to combine cybersecurity elements into a comprehensive manual. See the Security Policies and Procedures section.  

Periodic reviews should be performed to ensure the remote work policy remains applicable as new technologies and practices are adopted and deployed. 

Useful websites, resources, and other tools