CCI-000937

The organization controls physical access to information system output devices to prevent unauthorized individuals from obtaining the output.

Implementation Guidance

The organization being inspected/assessed will identify, document, and execute any additional access controls required for output devices above and beyond physical access controls already in place for the facility IAW DoD 5200.08-R and DoD 5200.01-M (Volumes 1-4).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the list of additional access controls for output devices. Physical inspection is required to ensure these access controls are properly implemented.

Compelling Evidence

1.) Stickers/signs indicating highest classification of output from device on printers, copiers, fax, etc.

The controls below (if any) were marked by NIST as being related to CCI-000937.