Audit exportReport incident
DEMO
You’re viewing AuditPilot with seeded data for Cedar Creek Family Medicine. Add Clerk + Neon environment variables to enable real multi-tenant data.
All controls

Network Security · AP-NS-003

VPN required for remote access to clinical systems

Remote workforce members access clinical systems exclusively via a VPN with MFA — no exposed RDP or unauthenticated remote tools.

PassingHigh
Remediation guidance

Disable any direct internet-exposed RDP. Stand up a VPN with MFA. AuditPilot scans for exposed RDP weekly.

Status
Last checked5 hours ago
Next check dueApr 26, 2026
Weight12
Severityhigh
Framework requirements satisfied
HIPAA
§164.312(e)(1)

Transmission Security

SOC 2
CC6.6

Remote Access

HITRUST
01.j

User Authentication for External Connections

Linked evidence (0)
Add evidence
No evidence yet. Upload a screenshot, report, or signed document to mark this control as proven.