PE-5: Access Control for Output Devices
Control Family:
CSF v1.1 References:
PF v1.0 References:
Threats Addressed:
Baselines:
- Low
N/A
- Moderate
- PE-5
- High
- PE-5
- Privacy
N/A
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- PE-5: Access Control For Output Devices
Incorporates the following control from the previous version: PE-5(1): Access To Output By Authorized Individuals.
Control Statement
Control physical access to output from [Assignment: organization-defined output devices] to prevent unauthorized individuals from obtaining the output.
Supplemental Guidance
Controlling physical access to output devices includes placing output devices in locked rooms or other secured areas with keypad or card reader access controls and allowing access to authorized individuals only, placing output devices in locations that can be monitored by personnel, installing monitor or screen filters, and using headphones. Examples of output devices include monitors, printers, scanners, audio devices, facsimile machines, and copiers.
Control Enhancements
PE-5(2): Link to Individual Identity
Baseline(s):
Link individual identity to receipt of output from output devices.