myctrl.tools
Compare

SI-3(5)—Portable Storage Devices

>Control Description

[Incorporated into MP-7]

>Assessment Interview Topics

Questions assessors commonly ask

Process & Governance:

  • •What policies and procedures govern portable storage devices?
  • •Who is responsible for monitoring system and information integrity?
  • •How frequently are integrity monitoring processes reviewed and updated?

Technical Implementation:

  • •What technical controls detect and respond to portable storage devices issues?
  • •How are integrity violations identified and reported?
  • •What automated tools support system and information integrity monitoring?

Evidence & Documentation:

  • •Can you provide recent integrity monitoring reports or alerts?
  • •What logs demonstrate that SI-3(5) is actively implemented?
  • •Where is evidence of integrity monitoring maintained and for how long?

Ask AI

Configure your API key to use AI features.