PE-5 Access Control for Output Devices
Control
Control physical access to output from [Assignment: organization-defined output devices] to prevent unauthorized individuals from obtaining the output.
Discussion
Controlling physical access to output devices includes placing output devices in locked rooms or other secured areas with keypad or card reader access controls and allowing access to authorized individuals only, placing output devices in locations that can be monitored by personnel, installing monitor or screen filters, and using headphones. Examples of output devices include monitors, printers, scanners, audio devices, facsimile machines, and copiers.
Related Controls
Enhancements
1
Access Control for Output Devices | Access to Output by Authorized Individuals
Withdrawn: Incorporated into PE-5.
2
Access Control for Output Devices | Link to Individual Identity
Link individual identity to receipt of output from output devices.
Methods for linking individual identity to the receipt of output from output devices include installing security functionality on facsimile machines, copiers, and printers. Such functionality allows organizations to implement authentication on output devices prior to the release of output to individuals.
3
Access Control for Output Devices | Marking Output Devices
Withdrawn: Incorporated into PE-22.