PE 5 ACCESS CONTROL FOR OUTPUT DEVICES - NIST-SP-800-53-R5/NIST-SP-800-53-R5.github.io GitHub Wiki

PE-5 ACCESS CONTROL FOR OUTPUT DEVICES

Control: Control physical access to output from [ Assignment: organization defined output devices ] to prevent unauthorized individuals from obtaining the output.

Discussion: Controlling physical access to output devices includes placing output devices in locked rooms or other secured areas with keypad or card reader access controls and allowing access to authorized individuals only, placing output devices in locations that can be monitored by personnel, installing monitor or screen filters, and using headphones. Examples of output devices include monitors, printers, scanners, audio devices, facsimile machines, and copiers.

Related Controls: PE-2, PE-3, PE-4, PE-18.

Control Enhancements:

  • (1) ACCESS CONTROL FOR OUTPUT DEVICES | ACCESS TO OUTPUT BY AUTHORIZED INDIVIDUALS
    [Withdrawn: Incorporated into PE-5.]

  • (2) ACCESS CONTROL FOR OUTPUT DEVICES | LINK TO INDIVIDUAL IDENTITY
    Link individual identity to receipt of output from output devices.

    Discussion: Methods for linking individual identity to the receipt of output from output devices include installing security functionality on facsimile machines, copiers, and printers. Such functionality allows organizations to implement authentication on output devices prior to the release of output to individuals.

    Related Controls: None.

  • (3) ACCESS CONTROL FOR OUTPUT DEVICES | MARKING OUTPUT DEVICES
    [Withdrawn: Incorporated into PE-22.]

References: [IR 8023].

⚠️ **GitHub.com Fallback** ⚠️