Assessment Objective
Determine if:
- system media that contain CUI are marked to indicate distribution limitations.
- system media that contain CUI are marked to indicate handling caveats.
- system media that contain CUI are marked to indicate applicable CUI markings.
Assessment Methods
Examine
- physical protection policy and procedures
- media protection policy and procedures
- procedures for media marking
- list of system media marking security attributes
- system security plan
- other relevant documents or records
Interview
- personnel with system media protection and marking responsibilities
- personnel with information security responsibilities
Test
- processes for marking information media
- mechanisms for supporting or implementing media marking
Tichete legate
| Tip de legătură | Tichet |
|---|---|
| blocks | 03.08.04 Media Marking |