CMMCDocs.comHome / Glossary / Remote Access
Remote Access
Also known as: VPN
Network access to in-scope systems from outside the trusted internal network. Subject to strict CMMC controls including MFA, monitoring, and session termination.
Remote access is any network connection to in-scope systems originating from outside the contractor's trusted internal network — typically a VPN, a remote desktop, or a cloud-based access path. Remote access is heavily regulated by NIST SP 800-171 because it expands the attack surface beyond physical premises.
Key CMMC requirements affecting remote access include AC.L2-3.1.12 (monitor and control remote access), AC.L2-3.1.13 (multifactor authentication for remote access), AC.L2-3.1.14 (route remote access through managed access control points), and SC.L2-3.13.7 (prevent split tunneling).
Stop Googling. Start working.
CMMCDocs has all 110 NIST SP 800-171 Rev 2 requirements built in — with the language, the templates, and the evidence vault you need. Spin up a free demo workspace and click around the way an assessor would.
Get my demo account