Free compliance framework explorer — browse controls, evidence, and implementation guidance.Subscribe for updates →
SOC 247
ITSP.10.17198
ISO 42001soon
ISO 27001soon

Browse

98 controls

03.04.12System and component configuration for high-risk areasITSP.10.171Configuration management

Official Requirement

A. Issue systems or system components with the following configurations to individuals traveling to high-risk locations: [Assignment: organization-defined system configurations]. B. Apply the following security requirements to the system or system components when the individuals return from travel: [Assignment: organization-defined security requirements].

Source: Canadian Centre for Cyber Security ITSP.10.171 (2025), adapted from NIST SP 800-171 Rev. 3

In Plain English

When employees travel to high-risk locations (as defined by your organization), they must be issued specially configured systems -- typically loaner laptops with minimal data and enhanced security. When they return, those systems must be inspected, wiped, or sanitized before reconnecting to the corporate network.

Cross-framework mappings:ISO 42001 · coming soonISO 27001 · coming soon
View in Map →

Help us build what matters.

Vote for the next framework, subscribe for updates, and let us know if you'd contribute.

Truvo CyberTruvo CyberBuilt and maintained by Truvo Cyber
Authors·Connect with us
Updated: Mar 22, 2026Reviewed: Mar 22, 2026v1.0.0
Share this tool

The Trust Services Criteria referenced in this tool are published by the American Institute of Certified Public Accountants (AICPA) and incorporate principles from the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Criteria descriptions are reproduced for reference purposes. All implementation guidance, evidence recommendations, and control language are original work by Truvo Cyber. ISO 27001 and ISO 42001 are standards published by the International Organization for Standardization (ISO). Framework and standard names are the property of their respective owners. This tool is not affiliated with, endorsed by, or certified by AICPA, COSO, or ISO.

© 2026 Truvo Cyber. All rights reserved.

On-premises implementation and evidence

High-risk travel device configuration

Implementation steps

  1. Maintain a pool of clean, hardened loaner laptops with full-disk encryption and no stored organizational data for high-risk travel
  2. Issue loaner devices through a formal checkout process; document the user, destination, and travel dates
  3. Upon return, isolate the device on a quarantine network, run full security scans, and reimage before returning to the pool
  4. Maintain a documented list of high-risk travel destinations and review annually

Tools / systems

Evidence artifacts

Evidence frequency: Per-travel event; annual high-risk location list review