03.08.02 Media Access

Statement

Restrict access to CUI on system media to authorized personnel or roles.

Guidance

System media include digital and non-digital media. Access to CUI on system media can be restricted by physically controlling such media. This includes conducting inventories, ensuring that procedures are in place to allow individuals to check out and return media to the media library, and maintaining accountability for stored media. For digital media, access to CUI can be restricted by using cryptographic means. Encrypting data in storage or at rest is addressed in [](#/cprt/framework/version/SP_800_171_3_0_0/home?element=03.13.08) 03.13.08.

Assessment objective

access to CUI on system media is restricted to authorized personnel or roles.

Assessment method

• physical protection policy and procedures media protection policy and procedures procedures for media access restrictions access control policy and procedures media storage facilities access control records system security plan other relevant documents or records

Assessment method

• personnel with system media protection responsibilities personnel with information security responsibilities system administrators

Assessment method

• processes for restricting information on media mechanisms for supporting or implementing media access restrictions

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final