Assessment Objective
Determine if:
- MP-05(03)[01] a custodian to transport system media outside of controlled areas is identified;
- MP-05(03)[02] the identified custodian is employed during the transport of system media outside of controlled areas.
Assessment Methods
Examine
- System media protection policy
- procedures addressing media transport
- physical and environmental protection policy and procedures
- system media transport records
- audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system media transport responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for identifying and employing a custodian to transport media outside of controlled areas
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | MP-05(03) Custodians |