CSCv7|13.7

Title

Manage USB Devices

Description

If USB storage devices are required, enterprise software should be used that can configure systems to allow the use of specific devices. An inventory of such devices should be maintained.

Reference Item Details

Category: Data Protection

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Rocky Linux 8 Server L1 v2.0.0
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Rocky Linux 8 Workstation L2 v2.0.0
1.1.9 Disable USB StorageUnixCIS Oracle Linux 9 Workstation L2 v1.0.0
1.1.9 Disable USB StorageUnixCIS Rocky Linux 9 Server L1 v1.0.0
1.1.9 Disable USB StorageUnixCIS Red Hat EL9 Server L1 v1.0.0
1.1.9 Disable USB StorageUnixCIS AlmaLinux OS 9 Workstation L2 v1.0.0
1.1.9 Disable USB StorageUnixCIS Rocky Linux 9 Workstation L2 v1.0.0
1.1.9 Disable USB StorageUnixCIS Red Hat EL9 Workstation L2 v1.0.0
1.1.9 Disable USB StorageUnixCIS Oracle Linux 9 Server L1 v1.0.0
1.1.9 Disable USB StorageUnixCIS AlmaLinux OS 9 Server L1 v1.0.0
1.1.9 Ensure usb-storage is disabledUnixCIS Amazon Linux 2023 Server L1 v1.0.0
1.1.10 Disable USB StorageUnixCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1
1.1.10 Disable USB StorageUnixCIS Debian 10 Server L1 v2.0.0
1.1.10 Disable USB StorageUnixCIS Debian 10 Workstation L2 v2.0.0
1.1.10 Disable USB StorageUnixCIS Ubuntu Linux 20.04 LTS Workstation L2 v2.0.1
1.1.10 Disable USB Storage - blacklistUnixCIS Debian Linux 11 Workstation L2 v.1.0.0
1.1.10 Disable USB Storage - blacklistUnixCIS Ubuntu Linux 22.04 LTS Workstation L2 v.1.0.0
1.1.10 Disable USB Storage - blacklistUnixCIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0
1.1.10 Disable USB Storage - blacklistUnixCIS Debian Linux 11 Server L1 v1.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS Ubuntu Linux 22.04 LTS Workstation L2 v.1.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS Fedora 28 Family Linux Workstation L2 v2.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS Oracle Linux 8 Workstation L2 v2.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS CentOS Linux 8 Workstation L2 v2.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS Debian Linux 11 Workstation L2 v.1.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS AlmaLinux OS 8 Workstation L2 v2.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS Red Hat EL8 Workstation L2 v2.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS AlmaLinux OS 8 Server L1 v2.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS Red Hat EL8 Server L1 v2.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS Oracle Linux 8 Server L1 v2.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS Fedora 28 Family Linux Server L1 v2.0.0
1.1.10 Disable USB Storage - lsmodUnixCIS Debian Linux 11 Server L1 v1.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS Fedora 28 Family Linux Workstation L2 v2.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS Red Hat EL8 Workstation L2 v2.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS CentOS Linux 8 Workstation L2 v2.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS Oracle Linux 8 Server L1 v2.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS Red Hat EL8 Server L1 v2.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS Ubuntu Linux 22.04 LTS Workstation L2 v.1.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS AlmaLinux OS 8 Workstation L2 v2.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS Oracle Linux 8 Workstation L2 v2.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS AlmaLinux OS 8 Server L1 v2.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS Fedora 28 Family Linux Server L1 v2.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS Debian Linux 11 Workstation L2 v.1.0.0
1.1.10 Disable USB Storage - modprobeUnixCIS Debian Linux 11 Server L1 v1.0.0
1.1.20 Disable AutomountingUnixCIS Amazon Linux 2 STIG v1.0.0 L1
18.8.7.1.1 (BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.8.7.1.1 (BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker