PE-5(3) — Marking Output Devices

Output devices need to be labeled to indicate the sensitivity level of information they are approved to handle. A printer in the classified area should be clearly marked differently from one in the unclassified area.

Example 1: Label all printers, fax machines, and multifunction devices with the highest classification level of data they are authorized to process. Use color-coded labels — for example, green for unclassified, yellow for CUI, red for classified — placed prominently on the device.

Example 2: Include output device markings in your facility security documentation and diagrams. When new devices are installed, the security team must approve the marking and location before the device goes into service. Include device marking checks in your regular security walkthroughs.