Key concepts
The guide covers telework technologies, protecting stored and transmitted information, securing home and public networks, and securing personally owned computers and mobile devices used for work.
How it is organized
- Overview of telework technologies
- Securing information: storage, transmission, backups
- Securing home networks and using public networks
- Securing personal computers and mobile devices
- Third-party devices
What a school district should take from it
- Staff need short, specific guidance for home routers, updates and public Wi-Fi.
- Some details are dated (2016), but the habits it describes still apply.
How to use it in your district
- Turn its checklists into a one-page staff handout for working from home.
- Include home-network basics in annual awareness training.
- Pair with the district's personal device policy.
Common misconceptions
- Home networks are the employee's business only.
- When staff handle district data at home, home network habits affect district risk.
Rubric categories and K12 Cyber Forward tools
Cybersecurity Rubric 2.0 categories
- PR.ATAwareness & Training
- PR.PSPlatform Security
Tools in the program portal
- Training TrackerRecord awareness training and phishing exercises
- Staff learningShort courses and lessons for staff
- Two-minute lessonsFree micro-lessons for staff and families
Related publications
- SP 800-46 Rev. 2Remote access and BYOD
Citation and source
SP 800-114 Rev. 1, User's Guide to Telework and Bring Your Own Device (BYOD) Security. National Institute of Standards and Technology. 2016. https://doi.org/10.6028/NIST.SP.800-114r1.
Replaces: SP 800-114 (2007).
Topics: Awareness and training, Devices and malware. This summary was written by the K12 Cyber Forward program team in its own words. NIST is not affiliated with the program and has not reviewed it. The official publication on csrc.nist.gov controls.