PE-5: Access Control for Output Devices

CSF v1.1 References:

CSF v2.0 References:

PF v1.0 References:

Threats Addressed:

Baselines:

  • Low

    N/A

  • Moderate
    • PE-5
  • High
    • PE-5
  • Privacy

    N/A

Previous Version:

Info icon.

Incorporates the following control from the previous version of the control set: PE-5(1): Access To Output By Authorized Individuals.

Control Statement

Control physical access to output from [Assignment: organization-defined output devices] to prevent unauthorized individuals from obtaining the output.

Supplemental Guidance

Controlling physical access to output devices includes placing output devices in locked rooms or other secured areas with keypad or card reader access controls and allowing access to authorized individuals only, placing output devices in locations that can be monitored by personnel, installing monitor or screen filters, and using headphones. Examples of output devices include monitors, printers, scanners, audio devices, facsimile machines, and copiers.

Control Enhancements