13.9: Encrypt Data on USB Storage Devices

CSF v1.1 References:

PR.PT-2

PF v1.0 References:

PR.PT-P1

Threats Addressed:

Group:

IG3

The next version of the control set incorporates all or part of this control into: 3.9: Encrypt Data on Removable Media.

Control Statement

If USB storage devices are required, all data stored on such devices must be encrypted while at rest.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]