+AC-20(04) Network Accessible Storage Devices — Prohibited Use

AC-20(04) Network Accessible Storage Devices — Prohibited Use

Control

Prohibit the use of [Assignement: network-accessible storage devices] in external systems.

Discussion

Network-accessible storage devices in external systems include online storage devices in public, hybrid, or community cloud-based systems.

Assessment Objective

the use of [Assignement: network-accessible storage devices] is prohibited in external systems.

Assessment Method

Examine

Access control policy procedures addressing use of network-accessible storage devices in external systems system design documentation system configuration settings and associated documentation system connection or processing agreements list of network-accessible storage devices prohibited from use in external systems system audit records system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for prohibiting the use of network-accessible storage devices in external systems system/network administrators organizational personnel with information security responsibilities

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
is blocked by AC-20(04) Network Accessible Storage Devices — Prohibited Use – Assessment Procedure