Assessment Objective

Determine if:

• MP-04(02)[01] access to media storage areas is restricted using [Assignment: automated mechanisms];
• MP-04(02)[02] access attempts to media storage areas are logged using [Assignment: automated mechanisms];
• MP-04(02)[03] access granted to media storage areas is logged using [Assignment: automated mechanisms].

Assessment Methods

Examine

• System media protection policy
• procedures addressing media storage
• access control policy and procedures
• physical and environmental protection policy and procedures
• system design documentation
• system configuration settings and associated documentation
• media storage facilities
• access control devices
• access control records
• audit records
• system security plan
• other relevant documents or records

Interview

• Organizational personnel with system media protection and storage responsibilities
• organizational personnel with information security responsibilities
• system/network administrators

Test

• Automated mechanisms restricting access to media storage areas
• automated mechanisms auditing access attempts and access granted to media storage areas

Kwistjonijiet marbuta

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final