NIST SP 800-53 (controls) 5.2.0
| Ref | Title | Text | |
|---|---|---|---|
| MP-01 | Policy and Procedures | a. Develop, document, and disseminate to [Assignment: organization-defined personnel or roles]: 1. [Selection (one or more): organization-level; mission/business process-level; system-level] media protection policy that: (a) Addresses purpo | |
| MP-02 | Media Access | Restrict access to [Assignment: organization-defined types of digital and/or non-digital media] to [Assignment: organization-defined personnel or roles]. | |
| MP-02(01) in MP-2 |
Automated Restricted Access withdrawn | ||
| MP-02(02) in MP-2 |
Cryptographic Protection withdrawn | ||
| MP-03 | Media Marking | a. Mark system media indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information; and b. Exempt [Assignment: types of media exempted from marking] from marking if the media remain | |
| MP-04 | Media Storage | a. Physically control and securely store [Assignment: organization-defined types of digital and/or non-digital media] within [Assignment: organization-defined controlled areas] ; and b. Protect system media types defined in MP-4a until the | |
| MP-04(01) in MP-4 |
Cryptographic Protection withdrawn | ||
| MP-04(02) in MP-4 |
Automated Restricted Access | Restrict access to media storage areas and log access attempts and access granted using [Assignment: organization-defined automated mechanisms]. | |
| MP-05 | Media Transport | a. Protect and control [Assignment: types of system media] during transport outside of controlled areas using [Assignment: organization-defined controls]; b. Maintain accountability for system media during transport outside of controlled ar | |
| MP-05(01) in MP-5 |
Protection Outside of Controlled Areas withdrawn | ||
| MP-05(02) in MP-5 |
Documentation of Activities withdrawn | ||
| MP-05(03) in MP-5 |
Custodians | Employ an identified custodian during transport of system media outside of controlled areas. | |
| MP-05(04) in MP-5 |
Cryptographic Protection withdrawn | ||
| MP-06 | Media Sanitization | a. Sanitize [Assignment: organization-defined system media] prior to disposal, release out of organizational control, or release for reuse using [Assignment: organization-defined sanitization techniques and procedures] ; and b. Employ sanit | |
| MP-06(01) in MP-6 |
Review, Approve, Track, Document, and Verify | Review, approve, track, document, and verify media sanitization and disposal actions. | |
| MP-06(02) in MP-6 |
Equipment Testing | Test sanitization equipment and procedures [Assignment: organization-defined frequency] to ensure that the intended sanitization is being achieved. | |
| MP-06(03) in MP-6 |
Nondestructive Techniques | Apply nondestructive sanitization techniques to portable storage devices prior to connecting such devices to the system under the following circumstances: [Assignment: circumstances]. | |
| MP-06(04) in MP-6 |
Controlled Unclassified Information withdrawn | ||
| MP-06(05) in MP-6 |
Classified Information withdrawn | ||
| MP-06(06) in MP-6 |
Media Destruction withdrawn | ||
| MP-06(07) in MP-6 |
Dual Authorization | Enforce dual authorization for the sanitization of [Assignment: system media]. | |
| MP-06(08) in MP-6 |
Remote Purging or Wiping of Information | Provide the capability to purge or wipe information from [Assignment: systems or system components] [Selection: remotely; under {{ insert: param, mp-06.08_odp.03 }} ]. | |
| MP-07 | Media Use | a. [Selection: restrict; prohibit] the use of [Assignment: types of system media] on [Assignment: systems or system components] using [Assignment: controls] ; and b. Prohibit the use of portable storage devices in organizational systems whe | |
| MP-07(01) in MP-7 |
Prohibit Use Without Owner withdrawn | ||
| MP-07(02) in MP-7 |
Prohibit Use of Sanitization-resistant Media | Prohibit the use of sanitization-resistant media in organizational systems. | |
| MP-08 | Media Downgrading | a. Establish [Assignment: system media downgrading process] that includes employing downgrading mechanisms with strength and integrity commensurate with the security category or classification of the information; b. Verify that the system m | |
| MP-08(01) in MP-8 |
Documentation of Process | Document system media downgrading actions. | |
| MP-08(02) in MP-8 |
Equipment Testing | Test downgrading equipment and procedures [Assignment: organization-defined frequency] to ensure that downgrading actions are being achieved. | |
| MP-08(03) in MP-8 |
Controlled Unclassified Information | Downgrade system media containing controlled unclassified information prior to public release. | |
| MP-08(04) in MP-8 |
Classified Information | Downgrade system media containing classified information prior to release to individuals without required access authorizations. |
30 of 1196.