id: "PE-05" title: "Access Control for Output Devices" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-05" priority: "P2" implementation_level: "organization" enhancements: - pe-5.1 - pe-5.2 - pe-5.3


Statement

Control physical access to output from {{ insert: param, pe-05_odp }} to prevent unauthorized individuals from obtaining the output.

Guidance

Controlling physical access to output devices includes placing output devices in locked rooms or other secured areas with keypad or card reader access controls and allowing access to authorized individuals only, placing output devices in locations that can be monitored by personnel, installing monitor or screen filters, and using headphones. Examples of output devices include monitors, printers, scanners, audio devices, facsimile machines, and copiers.

Assessment Objective

physical access to output from {{ insert: param, pe-05_odp }} is controlled to prevent unauthorized individuals from obtaining the output.

Physical and environmental protection policy

procedures addressing access control for display medium

facility layout of system components

actual displays from system components

list of output devices and associated outputs requiring physical access controls

physical access control logs or records for areas containing output devices and related outputs

system security plan

other relevant documents or records

Organizational personnel with physical access control responsibilities

organizational personnel with information security responsibilities

Organizational processes for access control to output devices

mechanisms supporting and/or implementing access control to output devices