On 3/26/20 1:18 PM, Gabe Alford wrote:
We think the rule is expected to check for all types of removable
devices. Probably, they could be defined as the pretty common ones,
like floppy disks, CDs, DVDs or USB sticks. But we need to clarify all
the requirements before completing the fix.
What specific questions / concerns can be clarified?
Here's a good starting point to read the requirements:
https://nvd.nist.gov/800-53/Rev4/control/mp-7