From 2d28cb5666fe5fb5a47a134323e001fd1a6d9a54 Mon Sep 17 00:00:00 2001
From: Vera Hartmann <v.hartmann@nexus.local>
Date: Tue, 10 Mar 2026 14:00:00 +0000
Subject: [PATCH] Add remote work security policy

---
 policies/remote-work.md | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 policies/remote-work.md

diff --git a/policies/remote-work.md b/policies/remote-work.md
new file mode 100644
index 0000000..cae2e5c
--- /dev/null
+++ b/policies/remote-work.md
@@ -0,0 +1,22 @@
+# Remote Work Security Policy
+
+**Version:** 2.2  |  **Owner:** HR  |  **Classification:** Internal
+
+## Requirements
+
+All remote workers must:
+- Use a company-managed device or approved BYO device with MDM enrolled
+- Connect via VPN (WireGuard or GlobalProtect) for access to internal resources
+- Use MFA on all work accounts
+- Ensure home networks have WPA2/WPA3 and unique passwords
+- Lock screens when stepping away (timeout: max 5 minutes)
+
+## Prohibited in remote work
+
+- Using public Wi-Fi without VPN
+- Printing confidential documents at home
+- Allowing family members to use work devices
+
+## Equipment return
+
+Company equipment must be returned within 5 working days of leaving.