CCI-001012

Defines types of system media to exempt from marking as long as the media remain within organization-defined controlled areas.

Implementation Guidance

Determine if [MP-03_ODP[01]; types of system media exempt from marking when remaining in controlled areas are defined] remain within [MP-03_ODP[02]; controlled areas where media is exempt from marking are defined].

Validation Procedures

Examine: [SELECT FROM: System media protection policy; procedures addressing media marking; physical and environmental protection policy and procedures; list of system media marking security attributes; designated controlled areas; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system media protection and marking responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for marking information media; mechanisms supporting and/or implementing media marking].

The controls below (if any) were marked by NIST as being related to CCI-001012.