AC-20(4): Network Accessible Storage Devices – Prohibited Use

Control Family:

Parent Control:

AC-20: Use of External Systems

CSF v1.1 References:

Threats Addressed:

Information Disclosure

Baselines:

(Not part of any baseline)

Previous Version:

NIST Special Publication 800-53 Revision 4:
AC-20(4): Network Accessible Storage Devices

Control Statement

Prohibit the use of [Assignment: organization-defined network accessible storage devices] in external systems.

Supplemental Guidance

Network-accessible storage devices in external systems include online storage devices in public, hybrid, or community cloud-based systems.