NIST 800-53 Rev. 5

AC-20(5): Use of External Systems | Portable Storage Devices — Prohibited Use

Control Text:

Prohibit the use of organization-controlled portable storage devices by authorized individuals on external systems.

Limits on the use of organization-controlled portable storage devices in external systems include a complete prohibition of the use of such devices. Prohibiting such use is enforced using technical methods and/or nontechnical (i.e., process-based) methods.

Related Controls