AC-20(4)

AC-20(4): Network Accessible Storage Devices — Prohibited Use

Prohibit the use of [network-accessible storage devices prohibited from use in external systems are defined;] in external systems.

Network-accessible storage devices in external systems include online storage devices in public, hybrid, or community cloud-based systems.

Overlays
CDS - Access, CDS - Multilevel, CDS - Transfer, Classified, Int-A, Int-B, Int-C

CSF Categories
None

The controls below (if any) were marked by NIST as being related to AC-20(4).

Control	Description
No controls

The controls below (if any) add on to the requirements of AC-20(4).

Control	Description
No controls

The CCIs below are tied to AC-20(4).

CCI	Definition
CCI-002339	Defines the network accessible storage devices that are to be prohibited from being used in external systems.
CCI-002340	Prohibit the use of organization-defined network accessible storage devices in external systems.