CCI-002937

The organization marks organization-defined information system output devices indicating the appropriate security marking of the information permitted to be output from the device.

Implementation Guidance

The organization being inspected/assessed marks all devices if the organizational facility contains classified information indicating the appropriate security marking of the information permitted to be output from the device. DoD has defined the information system output devices as all devices if the organizational facility contains classified information.

Validation Procedures

The organization conducting the inspection/assessment inspects a sampling of information system components to ensure the organization being inspected/assessed marks all devices if the organizational facility contains classified information indicating the appropriate security marking of the information permitted to be output from the device. DoD has defined the information system output devices as all devices if the organizational facility contains classified information.

Compelling Evidence

1.) Sampling of information system components

The controls below (if any) were marked by NIST as being related to CCI-002937.