Title

If the system boots from removable media, it must be stored in a safe or similarly secured container. (Cat I impact)

Discussion

Storing the boot loader on removable media in an insecure location could allow a malicious user to modify the systems boot instructions or boot to an insecure operating system.

Check Content

Ask the SA if the system boots from removable media. If so, ask if the boot media is stored in a secure container when not in use. If it is not, this is a finding.

Fix Text

Store the system boot media in a secure container when not in use.

Additional Identifiers

Rule ID: SV-227075r603265_rule

Vulnerability ID: V-227075

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.