CCI-002545

Defines the connection ports or input/output devices that are to be physically or logically disabled or removed from organization-defined systems or system components.

Implementation Guidance

Determine if [SC-41_ODP[01]; connection ports or input/output devices to be disabled or removed are defined] are [SC-41_ODP[02]; one of the following PARAMETER VALUES is selected: {physically; logically}] disabled or removed on [SC-41_ODP[03]; systems or system components with connection ports or input/output devices to be disabled or removed are defined].

Validation Procedures

Examine: [SELECT FROM: System and communications protection policy; access control policy and procedures; procedures addressing port and input/output device access; system design documentation; system configuration settings and associated documentation; system architecture; systems or system components; list of connection ports or input/output devices to be physically disabled or removed on systems or system components; system security plan; other relevant documents or records]. Interview: [SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel installing, configuring, and/or maintaining the system]. Test: [SELECT FROM: Mechanisms supporting and/or implementing the disabling of connection ports or input/output devices].

The controls below (if any) were marked by NIST as being related to CCI-002545.