dch-102-prohibitusewithoutowner.md

SCF - DCH-10.2 - Prohibit Use Without Owner

Mechanisms exist to prohibit the use of portable storage devices in organizational information systems when such devices have no identifiable owner.

Mapped framework controls

NIST 800-53

• MP-7

Control questions

Does the organization prohibit the use of portable storage devices in organizational information systems when such devices have no identifiable owner?