AM-09—Use of Portable Media
>Control Description
The use of portable media in Organization datacenters is prohibited unless explicitly authorized by management.
Theme
Process
Type
Preventive
Policy/Standard
Asset Management Policy>Implementation Guidance
1. Ensure policy and procedures are established and communicated prohibiting the use of portable media. 2. Ensure necessary controls are in place to detect the usage of portable media inside the organization's network. 3. Ensure any exceptions are documented based on business justification and need and are approved appropriately.
>Testing Procedure
1. Inspect the policy and/or standard to determine that the use of portable media in the datacenters is prohibited unless explicitly authorized by management. 2. Inspect Configurations to detect the use of portable media.
>Audit Artifacts
E-AM-01
E-AM-07
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.