Assessment Objective
Determine if:
- MP-03a. system media is marked to indicate distribution limitations, handling caveats, and applicable security markings (if any) of the information;
- MP-03b. [Assignment: types of media exempted from marking] remain within [Assignment: controlled areas].
Assessment Methods
Examine
- System media protection policy
- procedures addressing media marking
- physical and environmental protection policy and procedures
- list of system media marking security attributes
- designated controlled areas
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system media protection and marking responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for marking information media
- mechanisms supporting and/or implementing media marking
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | MP-03 [M] Media Marking |