CM-07(09) Prohibiting The Use of Unauthorized Hardware
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Prohibiting The Use of Unauthorized Hardware
Control
(a) Identify [Assignment: hardware components];
(b) Prohibit the use or connection of unauthorized hardware components;
(c) Review and update the list of authorized hardware components [Assignment: frequency].
Discussion
Hardware components provide the foundation for organizational systems and the platform for the execution of authorized software programs. Managing the inventory of hardware components and controlling which hardware components are permitted to be installed or connected to organizational systems is essential in order to provide adequate security.
Parameters
cm-07.09_odp.01: hardware components
cm-07.09_odp.02: frequency
STIG rules that implement this control 9
Apple macOS 15 (Sequoia) V1R8
- APPL-15-005090 CAT II The macOS system must authorize USB devices before allowing connection.
Apple macOS 26 (Tahoe) V1R4
- APPL-26-005090 CAT II The macOS system must authorize USB devices before allowing connection.
Canonical Ubuntu 22.04 LTS V2R10
- UBTU-22-291010 CAT II Ubuntu 22.04 LTS must disable automatic mounting of Universal Serial Bus (USB) mass storage driver.
Canonical Ubuntu 24.04 LTS V1R7
- UBTU-24-300039 CAT II Ubuntu 24.04 LTS must disable automatic mounting of Universal Serial Bus (USB) mass storage driver.
Microsoft Windows Server 2025 V1R4
- WN25-00-000002 CAT II Windows Server 2025 must prohibit the use or connection of unauthorized hardware components.
Red Hat Enterprise Linux 10 V1R3
- RHEL-10-200561 CAT II RHEL 10 must have the USBGuard package enabled.
Red Hat Enterprise Linux 9 V2R10
- RHEL-09-291010 CAT II RHEL 9 must be configured to disable USB mass storage.
- RHEL-09-291015 CAT II RHEL 9 must have the USBGuard package installed.
- RHEL-09-291020 CAT II RHEL 9 must have the USBGuard package enabled.