CCI-002546

The organization physically disables or removes organization-defined connection ports or input/output devices on organization-defined information systems or information system components.

Implementation Guidance

The organization being inspected/assessed physically disables or removes connection ports or input/output devices defined in SC-41, CCI 2545 on information systems or information system components defined in SC-41, CCI 2544.

Validation Procedures

The organization conducting the inspection/assessment examines a sampling of devices to ensure the organization being inspected/assessed physically disables or removes connection ports or input/output devices defined in SC-41, CCI 2545 on information systems or information system components defined in SC-41, CCI 2544.

Compelling Evidence

1.) Sample of devices that the site physically disables or removes connection ports or input/output devices defined in SC-41, CCI 2545 on information systems or information system components defined in SC-41, CCI 2544.

The controls below (if any) were marked by NIST as being related to CCI-002546.