ComplianceNIST 800-53 enhancement

NIST-AC-19(4) Restrictions for Classified Information

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AC Access Control
Control
AC-19(4)

Control statement

(a) Prohibit the use of unclassified mobile devices in facilities containing systems processing, storing, or transmitting classified information unless specifically permitted by the authorizing official; and (b) Enforce the following restrictions on individuals permitted by the authorizing official to use unclassified mobile devices in facilities containing systems processing, storing, or transmitting classified information: (1) Connection of unclassified mobile devices to classified systems is prohibited; (2) Connection of unclassified mobile devices to unclassified systems requires approval from the authorizing official; (3) Use of internal or external modems or wireless interfaces within the unclassified mobile devices is prohibited; and (4) Unclassified mobile devices and the information stored on those devices are subject to random reviews and inspections by [Assignment: security officials] , and if classified information is found, the incident handling policy is followed. (c) Restrict the connection of classified mobile devices to classified systems in accordance with [Assignment: security policies].

Discussion

None.

Related

Enhancement of · Compliance (1)

  • NIST-AC-19 Access Control for Mobile Devices NIST 800-53 control

Related control · Compliance (2)

  • NIST-CM-8 System Component Inventory NIST 800-53 control
  • NIST-IR-4 Incident Handling NIST 800-53 control