AC-20(05) Portable Storage Devices — Prohibited Use
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Portable Storage Devices — Prohibited Use
Control
Prohibit the use of organization-controlled portable storage devices by authorized individuals on external systems.
Discussion
Limits on the use of organization-controlled portable storage devices in external systems include a complete prohibition of the use of such devices. Prohibiting such use is enforced using technical methods and/or nontechnical (i.e., process-based) methods.
Related controls
mp-7, pl-4, ps-6, sc-41
Assessment objective
AC-20(05) the use of organization-controlled portable storage devices by authorized individuals is prohibited on external systems.
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).