Cyber Essentials - Terminal Server

[mbedford]

We offer a terminal server solution (Remote desktop services). Our end users can connect from home using there personal devices. Access is protected via numerous methods (MFA, geo blocking, brute force protection etc)

 

Would these home.devices connecting via RDP fall into scope for CE?

[free780]

Yes.

Is it limited to organisational owned devices?

If not then you need a way to check for compliance.