AC-20(4): Network Accessible Storage Devices – Prohibited Use

Control Family:

Access Control

CSF v1.1 References:

Threats Addressed:


(Not part of any baseline)

Previous Version:

Control Statement

Prohibit the use of [Assignment: organization-defined network accessible storage devices] in external systems.

Supplemental Guidance

Network-accessible storage devices in external systems include online storage devices in public, hybrid, or community cloud-based systems.