CCI-001016

The organization defines controlled areas where organization-defined types of digital and/or non-digital media are physically controlled and securely stored.

Implementation Guidance

DoD has defined the controlled areas as areas approved for processing or storing data IAW the sensitivity and/or classification level of the information contained on/within the media.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the controlled areas as areas approved for processing or storing data IAW the sensitivity and/or classification level of the information contained on/within the media.

Compelling Evidence

Automatically compliant

The controls below (if any) were marked by NIST as being related to CCI-001016.