An error occurred:

CCI-001014

CCI-001014 Definition

The organization physically controls and securely stores organization-defined types of digital and/or non-digital media within organization-defined controlled areas.
Status
Type CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed physically controls and securely stores all digital and non-digital media containing sensitive, controlled, and/or classified information within areas approved for processing or storing data IAW the sensitivity and/or classification level of the information contained on/within the media. DoD has defined the digital and non-digital media types as all digital and non-digital media containing sensitive, controlled, and/or classified information. DoD has defined the controlled areas as areas approved for processing or storing data IAW the sensitivity and/or classification level of the information contained on/within the media.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the list of all digital and non-digital media containing sensitive, controlled, and/or classified information within areas approved for processing or storing data IAW the sensitivity and/or classification level of the information contained on/within the media to ensure that physical controls are in place and that it is securely stored as defined in PE-3. DoD has defined the digital and non-digital media types as all digital and non-digital media containing sensitive, controlled, and/or classified information. DoD has defined the controlled areas as areas approved for processing or storing data IAW the sensitivity and/or classification level of the information contained on/within the media.

Compelling Evidence

1.) Written review of inspection of organization's storage areas where digital and non-digital media is being stored to ensure that digital and non-digital media containing sensitive, controlled, and/or classified information is stored in controlled areas that are areas approved for processing or storing data IAW the sensitivity and/or classification level of the information contained on/within the media.