Detections
Analytics
CSCv6|13.5
Title
Configure systems so that they will not write data to USB tokens or USB hard drives.Description
If there is no business need for supporting such devices, configure systems so that they will not write data to USB tokens or USB hard drives. If such devices are required, enterprise software should be used that can configure systems to allow only specific USB devices (based on serial number or other unique property) to be accessed, and that can automatically encrypt all data placed on such devices. An inventory of all authorized devices must be maintained.Reference Item Details
Reference: CIS Critical Security Controls v6
Category: Data Protection
Family: Network
Audit Items
View all Reference Audit Items