special publication 800-46

The National Institute of Standards and Technology has issued a technical bulletin urging organizations to enact  security policies and require multifactor authentication for teleworking employees who need to access enterprise data.