For many organizations, their employees, contractors, business partners, vendors, and/or others use telework or remote access technologies to perform work from external locations. All components of these technologies, including organization-issued and bring your own device (BOYD) client devices, should be secured against expected threats as identified through threat models.