CCI-002339

Defines the network accessible storage devices that are to be prohibited from being used in external systems.

Implementation Guidance

The organization being inspected/assessed defines and documents the network accessible storage devices that are to be prohibited from being used in external information systems. DoD has determined the network accessible storage devices are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented network accessible storage devices to ensure the organization being inspected/assessed defines the network accessible storage devices that are to be prohibited from being used in external information systems. DoD has determined the network accessible storage devices are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated documentation that defines the network accessible storage devices that to be prohibited from being used in external information systems.

The controls below (if any) were marked by NIST as being related to CCI-002339.