Navigate

AC-20 (2)

AC-20 (2): Portable Storage Devices

The organization [Selection: restricts; prohibits] the use of organization-controlled portable storage devices by authorized individuals on external information systems.

Supplemental

Limits on the use of organization-controlled portable storage devices in external information systems include, for example, complete prohibition of the use of such devices or restrictions on how the devices may be used and under what conditions the devices may be used.

CIA Levels
Confidentiality	low
Integrity	unknown
Availability	unknown

Overlays
Classified, Int-A, Int-B, Int-C

Related Controls

The controls below (if any) were marked by NIST as being related to AC-20 (2).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of AC-20 (2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-20 (2).

CCI	Definition
CCI-000097	The organization restricts or prohibits the use of organization-controlled portable storage devices by authorized individuals on external information systems.