AC-20.5 · Portable Storage Devices — Prohibited Use

Control Description

Prohibit the use of organization-controlled portable storage devices by authorized individuals on external systems.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Enhancement
Control Statement
The control requirements

Prohibit the use of organization-controlled portable storage devices by authorized individuals on external systems.

Supplemental Guidance

Limits on the use of organization-controlled portable storage devices in external systems include a complete prohibition of the use of such devices. Prohibiting such use is enforced using technical methods and/or nontechnical (i.e., process-based) methods.

Related NIST Controls
Other NIST 800-53 controls related to this one