+AC-20(02) [M] Portable Storage Devices — Restricted Use

AC-20(02) [M] Portable Storage Devices — Restricted Use

Control

Restrict the use of organization-controlled portable storage devices by authorized individuals on external systems using [Assignement: restrictions].

Discussion

Limits on the use of organization-controlled portable storage devices in external systems include restrictions on how the devices may be used and under what conditions the devices may be used.

Assessment Objective

the use of organization-controlled portable storage devices by authorized individuals is restricted on external systems using [Assignement: restrictions].

Assessment Method

Examine

Access control policy procedures addressing the use of external systems system configuration settings and associated documentation system connection or processing agreements account management documents system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for restricting or prohibiting the use of organization-controlled storage devices on external systems system/network administrators organizational personnel with information security responsibilities

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by AC-20(02) [M] Portable Storage Devices — Restricted Use – Assessment Procedure
is blocked by Portable Storage Devices