AC-20(05) Portable Storage Devices — Prohibited Use
Prohibit the use of organization-controlled portable storage devices by authorized individuals on external systems.
Limits on the use of organization-controlled portable storage devices in external systems include a complete prohibition of the use of such devices. Prohibiting such use is enforced using technical methods and/or nontechnical (i.e., process-based) methods.
Related controls 4
- MP-07 Media Use L M H P
- PL-04 Rules of Behavior L M H P
- PS-06 Access Agreements L M H P
- SC-41 Port and I/O Device Access L M H P