Why it matters
Home networks and personal devices sit outside your normal perimeter, and most small teams work remotely at least partly.
How a self-led small team implements it
A short remote-work security guideline (VPN/MFA use, device requirements) is proportionate; don't try to control home networks directly.
What auditors expect to see
Remote working policy.
Track A.6.7 in your own Statement of Applicability — mark it applicable, log your justification, and link it to the risk that drove it.
Start your ISMS