controls for off-premises locations, such as home-working, teleworking and temporary sites should
be determined by a risk assessment and suitable controls applied as appropriate, e.g. lockable filing
cabinets, clear desk policy, access controls for computers and secure communication with the office
(see also ISO/IEC 27033[15][16][17][18][19]);