Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.8.8

Prohibit Media with No Identifiable Owner

Official citation: 3.8.8

Class: core · Severity: medium

Statement of the obligation — verify against source

3.8.8

What it means

Prohibit the use of portable storage devices that have no identifiable owner. Devices of unknown origin — for example a USB drive found in a parking lot — are a common malware vector and shouldn't be connected to your systems.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.