National Secure Remote Work Policy
The National Secure Remote Working Policy ensures secure remote work environments in the UAE. It provides guidelines on governance, risk management, secure access, device and data security, implementation, and performance monitoring.
In today's evolving work landscape, the concept of remote work has gained unprecedented prominence, driven by technological advancements, fuelled by the pandemic and further changing societal norms. As organisations increasingly embrace flexible work arrangements, ensuring the security and integrity of remote work environments becomes a paramount concern. The National Secure Remote Work Policy is designed to address these challenges by establishing a comprehensive set of minimum requirements that enables employees to work remotely while upholding data confidentiality, safeguarding digital assets, and maintaining operational resilience. This policy outlines the principles and guidelines necessary to create a secure remote work ecosystem that empowers employees and protects the organisation from potential cyber security risks.
The Cyber Security Council has established this policy to enhance remote work security, aligned with the UAE’s national priority to be a global leader in cyber security; and enhance the security posture of organisations and individuals within the UAE utilising remote work arrangements.
Governance
Establishes the necessary governance to support secure remote work requirements. It focuses on identifying, assessing, mitigating, and monitoring remote work risks within the overall risk management program, and ensuring remote workers are aware of cybersecurity and risk practices.
Organisation Remote Access Security
Requirements to ensures a secure remote access environment by adopting a Zero Trust approach, maintaining a robust infrastructure, and promoting secure practices. It includes secure authentication and authorisation of remote workers and managing remote worker access throughout its life-cycle.
Client Device Security
Security measures to implement appropriate security controls on devices provided by the organisation, mobile devices, and third-party or Bring Your Own Device (BYOD) devices.
Data Security During Remote Work
Requirements to protect the residency and sovereignty of organisation data during remote work, ensuring data protection during transfer, and adhering to all relevant legal, regulatory, and contractual obligations.
Read the full policy here. (PDF, 2.2 MB)
Read more
Updated on:
02 Jul 2026
