OAR 291-005-0045: Remote Access

(1) Authorized persons may be granted access to Department of Corrections information systems by means of remote connection on a need-to-use basis. Such access shall be via the same user identification and password issued for local access. (2) Remote access is permitted by means of user identification and password only. The use of open user accounts and automatic sign-on are not permitted. (3) ITS standards and guidelines require additional security controls, such as MFA, virtual private network (VPN), geolocation verification, or other forms of secure connection to be used whenever telecommuting is authorized.