800-53|AC-20(2)
Title
PORTABLE STORAGE DEVICESDescription
The organization [Selection: restricts; prohibits] the use of organization-controlled portable storage devices by authorized individuals on external information systems.Supplemental
Limits on the use of organization-controlled portable storage devices in external information systems include, for example, complete prohibition of the use of such devices or restrictions on how the devices may be used and under what conditions the devices may be used.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Category: ACCESS CONTROL
Parent Title: USE OF EXTERNAL INFORMATION SYSTEMS
Family: ACCESS CONTROL
Baseline Impact: MODERATE,HIGH
Audit Items
View all Reference Audit Items