AC-20(2): Portable Storage Devices – Restricted Use

Control Family:

Access Control

CSF v1.1 References:

Threats Addressed:

Baselines:

  • Moderate
  • High

Previous Version:

Control Statement

Restrict the use of organization-controlled portable storage devices by authorized individuals on external systems using [Assignment: organization-defined restrictions].

Supplemental Guidance

Limits on the use of organization-controlled portable storage devices in external systems include restrictions on how the devices may be used and under what conditions the devices may be used.