Assessment Objective
Determine if:
- access to CUI on system media is restricted to authorized personnel or roles.
Assessment Methods
Examine
- physical protection policy and procedures
- media protection policy and procedures
- procedures for media access restrictions
- access control policy and procedures
- media storage facilities
- access control records
- system security plan
- other relevant documents or records
Interview
- personnel with system media protection responsibilities
- personnel with information security responsibilities
- system administrators
Test
- processes for restricting information on media
- mechanisms for supporting or implementing media access restrictions
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | 03.08.02 Media Access |