BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

SC-41 Port and I/O Device Access

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged SC

Title

Port and I/O Device Access

Control

[Selection: physically; logically] disable or remove [Assignment: connection ports or input/output devices] on the following systems or system components: [Assignment: systems or system components].

Discussion

Connection ports include Universal Serial Bus (USB), Thunderbolt, and Firewire (IEEE 1394). Input/output (I/O) devices include compact disc and digital versatile disc drives. Disabling or removing such connection ports and I/O devices helps prevent the exfiltration of information from systems and the introduction of malicious code from those ports or devices. Physically disabling or removing ports and/or devices is the stronger action.

Parameters

sc-41_odp.01: connection ports or input/output devices
sc-41_odp.02: [physically; logically]
sc-41_odp.03: systems or system components

Related controls

ac-20, mp-7

Assessment objective

SC-41 [Assignment: connection ports or input/output devices] are [Selection: physically; logically] disabled or removed on [Assignment: systems or system components].

STIG rules that implement this control 3

Google Android 16 COBO Y26M10

Google Android 17 COBO Y26M06

Samsung Android 16 COBO Y26M10