Assessment Objective
Determine if:
- system media that contain CUI are physically controlled.
- system media that contain CUI are securely stored.
Assessment Methods
Examine
- physical protection policy and procedures
- media protection policy and procedures
- procedures for media storage
- access control policy and procedures
- system media
- system security plan
- other relevant documents or records
Interview
- personnel with system media protection and storage responsibilities
- personnel with information security responsibilities
Test
- processes for storing information media
- mechanisms for supporting or implementing secure media storage/media protection
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | 03.08.01 Media Storage |