03.08.04 Media Marking

Statement

Mark system media that contain CUI to indicate distribution limitations, handling caveats, and applicable CUI markings.

Guidance

System media include digital and non-digital media. Marking refers to the use or application of human-readable security attributes. Labeling refers to the use of security attributes for internal system data structures. Digital media include diskettes, magnetic tapes, external or removable solid state or magnetic drives, flash drives, compact discs, and digital versatile discs. Non-digital media include paper and microfilm. CUI is defined by NARA along with marking, safeguarding, and dissemination requirements for such information.

Assessment objective

system media that contain CUI are marked to indicate distribution limitations.

Assessment objective

system media that contain CUI are marked to indicate handling caveats.

Assessment objective

system media that contain CUI are marked to indicate applicable CUI markings.

Assessment method

• physical protection policy and procedures media protection policy and procedures procedures for media marking list of system media marking security attributes system security plan other relevant documents or records

Assessment method

• personnel with system media protection and marking responsibilities personnel with information security responsibilities

Assessment method

• processes for marking information media mechanisms for supporting or implementing media marking

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final