Assessment Objective
Determine if:
- MP-02[01] access to [Assignment: types of digital media] is restricted to [Assignment: personnel or roles];
- MP-02[02] access to [Assignment: types of non-digital media] is restricted to [Assignment: personnel or roles].
Assessment Methods
Examine
- System media protection policy
- procedures addressing media access restrictions
- access control policy and procedures
- physical and environmental protection policy and procedures
- media storage facilities
- access control records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system media protection responsibilities
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Organizational processes for restricting information media
- mechanisms supporting and/or implementing media access restrictions
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | MP-02 [H] Media Access |