CCI-002546

Physically or logically disable or remove organization-defined connection ports or input/output devices on organization-defined systems or system components.

Implementation Guidance

The organization being inspected/assessed physically disables or removes connection ports or input/output devices defined in SC-41, CCI 2545 on information systems or information system components defined in SC-41, CCI 2544.

Validation Procedures

The organization conducting the inspection/assessment examines a sampling of devices to ensure the organization being inspected/assessed physically disables or removes connection ports or input/output devices defined in SC-41, CCI 2545 on information systems or information system components defined in SC-41, CCI 2544.

Compelling Evidence

1.) Sample of devices that the site physically disables or removes connection ports or input/output devices defined in SC-41, CCI 2545 on information systems or information system components defined in SC-41, CCI 2544.

The controls below (if any) were marked by NIST as being related to CCI-002546.