Department of Homeland Security - Configuring and Managing Remote Access for Industrial Control Systems
From the Department of Homeland Security, these are recommended practices for configuring and managing remote access for control systems covering various roles including vendors, field technicians, business partners (all of which may have differing requirements.)