Oregon Administrative Rules
Chapter 291 - DEPARTMENT OF CORRECTIONS
Division 5 - NETWORK INFORMATION SYSTEM ACCESS AND SECURITY
Section 291-005-0045 - Remote Access
Current through Register Vol. 63, No. 9, September 1, 2024
(1) Authorized persons may be granted access to Department of Corrections information systems by means of remote connection on a need-to-use basis. Such access shall be via the same user identification and password issued for local access.
(2) Remote access is permitted by means of user identification and password only. The use of open user accounts and automatic sign-on are not permitted.
(3) ITS standards and guidelines require additional security controls, such as MFA, virtual private network (VPN), geolocation verification, or other forms of secure connection to be used whenever telecommuting is authorized.
Statutory/Other Authority: ORS 179.040, 423.020, 423.030 & 423.075
Statutes/Other Implemented: ORS 179.040, 423.020, 423.030 & 423.075