# SC-41 — Port and I/O Device Access

- **Control ID:** SC-41
- **Family:** [SC](/md/families/SC.md)
- **Baselines:** No content available.
- **Enhancement of:** No content available.

## Description

\[assignment\] disable or remove \[assignment\] on the following systems or system components: \[assignment\].

## Discussion

Connection ports include Universal Serial Bus (USB), Thunderbolt, and Firewire (IEEE 1394). Input/output (I/O) devices include compact disc and digital versatile disc drives. Disabling or removing such connection ports and I/O devices helps prevent the exfiltration of information from systems and the introduction of malicious code from those ports or devices. Physically disabling or removing ports and/or devices is the stronger action.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

No content available.

## Related controls

- [AC-20](/md/controls/AC-20.md)
- [MP-7](/md/controls/MP-7.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.