800-53|SC-41

Title

PORT AND I/O DEVICE ACCESS

Description

The organization physically disables or removes [Assignment: organization-defined connection ports or input/output devices] on [Assignment: organization-defined information systems or information system components].

Supplemental

Connection ports include, for example, Universal Serial Bus (USB) and Firewire (IEEE 1394). Input/output (I/O) devices include, for example, Compact Disk (CD) and Digital Video Disk (DVD) drives. Physically disabling or removing such connection ports and I/O devices helps prevent exfiltration of information from information systems and the introduction of malicious code into systems from those ports/devices.

Reference Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

Family: SYSTEM AND COMMUNICATIONS PROTECTION

Priority: P0

Audit Items

View all Reference Audit Items

NamePluginAudit Name
Fortigate - Review and disable unused interfacesFortiGateTNS Fortigate FortiOS Best Practices v2.0.0
GOOG-12-008400 - Google Android 12 must be configured to disable USB mass storage mode.MDMMobileIron - DISA Google Android 12 COBO v1r1
GOOG-12-008400 - Google Android 12 must be configured to disable USB mass storage mode.MDMMobileIron - DISA Google Android 12 COPE v1r1
GOOG-12-008400 - Google Android 12 must be configured to disable USB mass storage mode.MDMAirWatch - DISA Google Android 12 COPE v1r1
GOOG-12-008400 - Google Android 12 must be configured to disable USB mass storage mode.MDMAirWatch - DISA Google Android 12 COBO v1r1
GOOG-13-008400 - Google Android 13 must be configured to disable USB mass storage mode.MDMAirWatch - DISA Google Android 13 COBO v1r1
GOOG-13-008400 - Google Android 13 must be configured to disable USB mass storage mode.MDMMobileIron - DISA Google Android 13 COPE v1r1
GOOG-13-008400 - Google Android 13 must be configured to disable USB mass storage mode.MDMAirWatch - DISA Google Android 13 COPE v1r1
GOOG-13-008400 - Google Android 13 must be configured to disable USB mass storage mode.MDMMobileIron - DISA Google Android 13 COBO v1r1
MSFT-11-003500 - Microsoft Android 11 must be configured to disable USB mass storage mode.MDMAirWatch - DISA Microsoft Android 11 COPE v1r1
MSFT-11-003500 - Microsoft Android 11 must be configured to disable USB mass storage mode.MDMMobileIron - DISA Microsoft Android 11 COBO v1r1
MSFT-11-003500 - Microsoft Android 11 must be configured to disable USB mass storage mode.MDMMobileIron - DISA Microsoft Android 11 COPE v1r1
MSFT-11-003500 - Microsoft Android 11 must be configured to disable USB mass storage mode.MDMAirWatch - DISA Microsoft Android 11 COBO v1r1