SC-43: USAGE RESTRICTIONS

NOT SELECTED FOR INDUSTRIAL CONTROL SYSTEMS

• a. Establishes usage restrictions and implementation guidance for [Assignment: organization-defined information system components] based on the potential to cause damage to the information system if used maliciously; and
• b. Authorizes, monitors, and controls the use of such components within the information system.

SUPPLEMENTAL GUIDANCE

Information system components include hardware, software, or firmware components (e.g., Voice Over Internet Protocol, mobile code, digital copiers, printers, scanners, optical devices, wireless technologies, mobile devices).

CONTROL ENHANCEMENTS

NO CONTROL ENHANCEMENTS

REFERENCES:

• NIST Special Publication 800-82 | GUIDE TO INDUSTRIAL CONTROL SYSTEMS (ICS) SECURITY