`MA-03(02)` Inspect Media

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version

unchanged MA Moderate baseline High baseline part of MA-3

Title

Inspect Media

Control

Check media containing diagnostic and test programs for malicious code before the media are used in the system.

Discussion

If, upon inspection of media containing maintenance, diagnostic, and test programs, organizations determine that the media contains malicious code, the incident is handled consistent with organizational incident handling policies and procedures.

Related controls

si-3

Assessment objective

MA-03(02) media containing diagnostic and test programs are checked for malicious code before the media are used in the system.

STIG rules that implement this control 3

Microsoft Edge V2R5

EDGE-00-000002 CAT II Bypassing Microsoft Defender SmartScreen prompts for sites must be disabled.
EDGE-00-000003 CAT II Bypassing of Microsoft Defender SmartScreen warnings about downloads must be disabled.
EDGE-00-000004 CAT III The list of domains for which Microsoft Defender SmartScreen will not trigger warnings must be allowlisted if used.

MA-03(02) Inspect Media