PE-5(3): Marking Output Devices

Control Family:

Physical And Environmental Protection

Parent Control:

PE-5: Access Control For Output Devices

Priority:

P2: Implement P2 security controls after implementation of P1 controls.

CSF v1.1 References:

PR.AC-2

Baselines:

(Not part of any baseline)

Control is withdrawn in the next version of this control set and incorporated into: PE-22: Component Marking.

Control Statement

The organization marks [Assignment: organization-defined information system output devices] indicating the appropriate security marking of the information permitted to be output from the device.

Supplemental Guidance

Outputs devices include, for example, printers, monitors, facsimile machines, scanners, copiers, and audio devices. This control enhancement is generally applicable to information system output devices other than mobiles devices.