PE-5 Access Control for Output Devices
Review PE-5
1. Set its parameters
No parameters to set for PE-5.
2. Record its status
Control physical access to output from [Assignment: organization-defined output devices] to prevent unauthorized individuals from obtaining the output.
Discussion
Controlling physical access to output devices includes placing output devices in locked rooms or other secured areas with keypad or card reader access controls and allowing access to authorized individuals only, placing output devices in locations that can be monitored by personnel, installing monitor or screen filters, and using headphones. Examples of output devices include monitors, printers, scanners, audio devices, facsimile machines, and copiers.
Enhancements
Review PE-5(2)
1. Set its parameters
No parameters to set for PE-5(2).
2. Record its status
Link individual identity to receipt of output from output devices.
Discussion
Methods for linking individual identity to the receipt of output from output devices include installing security functionality on facsimile machines, copiers, and printers. Such functionality allows organizations to implement authentication on output devices prior to the release of output to individuals.
No Enhancements match this Baseline.