6.4.2.1
Secure Portable Media
Secure Portable Media- Mandating of Organization-Owned Portable Media – Organizations using portable media shall mandate the sole use of organization-owned secure portable media.
-
5.10 Acceptable Use of Information and Other Associated Assets: Define, document, and enforce rules for acceptable use and handling of information assets.
5.32 Intellectual Property Rights: Implement suitable procedures to safeguard intellectual property rights.
5.33 Protection of Records: Safeguard records against loss, destruction, falsification, unauthorized access, and release.
-
3.1.21 Limit use of portable storage devices on external systems.
3.8.4 Mark media with necessary CUI markings and distribution limitations.
3.8.5 Control access to media containing CUI and maintain accountability for media during transport outside of controlled areas.
3.8.6 Implement cryptographic mechanisms to protect the confidentiality of CUI stored on digital media during transport unless otherwise protected by alternative physical safeguards.
3.8.7 Control the use of removable media on system components.
3.8.8 Prohibit the use of portable storage devices when such devices have no identifiable owner.
-
3.1.21 Limit use of portable storage devices on external systems.
3.8.4 Mark media with necessary CUI markings and distribution limitations.
3.8.5 Control access to media containing CUI and maintain accountability for media during transport outside of controlled areas.
3.8.6 Implement cryptographic mechanisms to protect the confidentiality of CUI stored on digital media during transport unless otherwise protected by alternative physical safeguards.
3.8.7 Control the use of removable media on system components.
3.8.8 Prohibit the use of portable storage devices when such devices have no identifiable owner.