Title

Disguised jump drives are not banned from locations containing DOD ISs. (Cat II impact)

Discussion

Since they could easily be overlooked in a spot search to verify that no restricted or sensitive information is being removed from a location, disguised USB jump drives will be banned from locations containing DOD ISs. The IAO, SA, and user will ensure disguised jump drives are not permitted in locations containing DoD ISs.

Check Content

The reviewer will interview the IAO to verify that the policy banning disguised jump drives from locations containing DoD ISs is disseminated to all users.

Fix Text

Disseminate the policy banning disguised jump drives from locations containing DoD ISs to all users.

Additional Identifiers

Rule ID: SV-6990r1_rule

Vulnerability ID: V-6768

Group Title: USB Disguised Jump Drives

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.