{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Asset Management & Inventory","Secure Configuration & Change Management"],"inherent_rating":"medium","taxonomy":["iso-27005-vulnerability","iso-27005-threat"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aasset-uncontrolled-copying-removable-media","description":"Absence of controls over copying data to removable devices, and users freely downloading/installing untested or unlicensed software, expands the attack surface and introduces malicious or unlicensed code into the environment.","details":{"category":"cyber_security","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"asset-uncontrolled-copying-removable-media","taxonomies":["iso-27005-vulnerability","iso-27005-threat"],"treatment":"mitigate"},"id":"risk:asset-uncontrolled-copying-removable-media","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aasset-uncontrolled-copying-removable-media","sourceIds":["iso-27001","nist-800-53","nist-csf-2","pci-dss","soc2"],"sourceUrl":null,"title":"Uncontrolled copying to removable media / unmanaged software installs","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0f7fc9418e610b233e1597b8914139fa8016890e22f9cc78cb8b6d3876663f2b","properties":{"rationale":"Acceptable-use rules, portable-storage restrictions, and centrally-managed endpoints prevent uncontrolled copying and unmanaged installs.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-06-d13d9c7f.json","sourceId":"uc:UC-ASSET-06","targetDetailPath":"/data/v1/records/risk-asset-uncontrolled-copying-removable-media-4a9604c7.json","targetId":"risk:asset-uncontrolled-copying-removable-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:38f2240418a85fa85e465cfa80a9a20621aa60e298e83b828591f08d6222e288","properties":{"rationale":"Software-inventory reconciliation against the authorized baseline detects unmanaged/rogue software installs.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-01-04dbd5db.json","sourceId":"uc:UC-ASSET-01","targetDetailPath":"/data/v1/records/risk-asset-uncontrolled-copying-removable-media-4a9604c7.json","targetId":"risk:asset-uncontrolled-copying-removable-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3ebf21110b9932582be6513a500ca6708f85bc247708ad7418fd99bd4630a82a","properties":{"rationale":"Controlling and scanning maintenance media for malicious code contributes to preventing malicious-code introduction via removable media.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-config-08-e94308da.json","sourceId":"uc:UC-CONFIG-08","targetDetailPath":"/data/v1/records/risk-asset-uncontrolled-copying-removable-media-4a9604c7.json","targetId":"risk:asset-uncontrolled-copying-removable-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d462f378f84328c29800212d7511939b50a08b29afd398558b6bb20218df5b89","properties":{"rationale":"Restricting installs to authorized/approved software with allowlisting and anti-malware directly prevents unmanaged, untested software installs and malicious code.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-config-05-84d5ee43.json","sourceId":"uc:UC-CONFIG-05","targetDetailPath":"/data/v1/records/risk-asset-uncontrolled-copying-removable-media-4a9604c7.json","targetId":"risk:asset-uncontrolled-copying-removable-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f07963e4887c624ba43be5f12f38e718a2d0613f0c67a2f78dee9e8379a08d9c","properties":{"rationale":"Restricting removable-media use to authorized personnel and approved types directly prevents uncontrolled copying to removable devices.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-04-347e095f.json","sourceId":"uc:UC-ASSET-04","targetDetailPath":"/data/v1/records/risk-asset-uncontrolled-copying-removable-media-4a9604c7.json","targetId":"risk:asset-uncontrolled-copying-removable-media","type":"mitigates"}],"schemaVersion":1}