PE-5(1): Access To Output By Authorized Individuals

CSF v1.1 References:

Threats Addressed:

Baselines:

(Not part of any baseline)

Warning icon.

Control is withdrawn in the next version of this control set and incorporated into: PE-5: Access Control for Output Devices.

Control Statement

The organization:

  1. Controls physical access to output from [Assignment: organization-defined output devices]; and
  2. Ensures that only authorized individuals receive output from the device.

Supplemental Guidance

Controlling physical access to selected output devices includes, for example, placing printers, copiers, and facsimile machines in controlled areas with keypad access controls or limiting access to individuals with certain types of badges.