+AC-20(05) Portable Storage Devices — Prohibited Use

AC-20(05) Portable Storage Devices — Prohibited Use

Control

Prohibit the use of organization-controlled portable storage devices by authorized individuals on external systems.

Discussion

Limits on the use of organization-controlled portable storage devices in external systems include a complete prohibition of the use of such devices. Prohibiting such use is enforced using technical methods and/or nontechnical (i.e., process-based) methods.

Assessment Objective

the use of organization-controlled portable storage devices by authorized individuals is prohibited on external systems.

Assessment Method

Examine

Access control policy procedures addressing use of portable storage devices in external systems system design documentation system configuration settings and associated documentation system connection or processing agreements system audit records system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for prohibiting the use of portable storage devices in external systems system/network administrators organizational personnel with information security responsibilities

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by AC-20(05) Portable Storage Devices — Prohibited Use – Assessment Procedure
is blocked by Portable Storage Devices