+AC-20(04) Network Accessible Storage Devices — Prohibited Use

AC-20(04) Network Accessible Storage Devices — Prohibited Use

Control

Prohibit the use of [Assignement: network-accessible storage devices] in external systems.

Discussion

Network-accessible storage devices in external systems include online storage devices in public, hybrid, or community cloud-based systems.

Assessment Objective

the use of [Assignement: network-accessible storage devices] is prohibited in external systems.

Assessment Method

Examine

Access control policy procedures addressing use of network-accessible storage devices in external systems system design documentation system configuration settings and associated documentation system connection or processing agreements list of network-accessible storage devices prohibited from use in external systems system audit records system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for prohibiting the use of network-accessible storage devices in external systems system/network administrators organizational personnel with information security responsibilities

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
is blocked by AC-20(04) Network Accessible Storage Devices — Prohibited Use – Assessment Procedure