BaselineWatch
Desk

AC-20(05) Portable Storage Devices — Prohibited Use

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged AC part of AC-20

Title

Portable Storage Devices — Prohibited Use

Control

Prohibit the use of organization-controlled portable storage devices by authorized individuals on external systems.

Discussion

Limits on the use of organization-controlled portable storage devices in external systems include a complete prohibition of the use of such devices. Prohibiting such use is enforced using technical methods and/or nontechnical (i.e., process-based) methods.

Related controls

mp-7, pl-4, ps-6, sc-41

Assessment objective

AC-20(05) the use of organization-controlled portable storage devices by authorized individuals is prohibited on external systems.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).