ComplianceNIST 800-53 enhancement
NIST-AC-20(5) Portable Storage Devices — Prohibited Use
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- AC Access Control
- Control
- AC-20(5)
Control statement
Prohibit the use of organization-controlled portable storage devices by authorized individuals on external systems.
Discussion
Limits on the use of organization-controlled portable storage devices in external systems include a complete prohibition of the use of such devices. Prohibiting such use is enforced using technical methods and/or nontechnical (i.e., process-based) methods.
Related
Enhancement of · Compliance (1)
- NIST-AC-20 Use of External Systems NIST 800-53 control
Related control · Compliance (4)
- NIST-MP-7 Media Use NIST 800-53 control
- NIST-PL-4 Rules of Behavior NIST 800-53 control
- NIST-PS-6 Access Agreements NIST 800-53 control
- NIST-SC-41 Port and I/O Device Access NIST 800-53 control