Navigate

CCI-001021

CCI-001021 Definition

Defines types of system media protected and controlled during transport outside of controlled areas.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD has defined the types of information system media as all digital and non-digital media containing sensitive, controlled, and/or classified information.

Validation Procedures

DoD has defined the types of information system media as all digital and non-digital media containing sensitive, controlled, and/or classified information. The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level.

Compelling Evidence

Automatically compliant

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001021.

Control	Description
MP-5	The organization: a: Protects and controls [organization-defined types of information system media] during transport outside of controlled areas using [organization-defined security safeguards]; b: Maintains accountability for information system media during transport outside of controlled areas; c: Documents activities associated with the transport of information system media; and d: Restricts the activities associated with the transport of information system media to authorized personnel.

Control

Description

MP-5

The organization:

a: Protects and controls [organization-defined types of information system media] during transport outside of controlled areas using [organization-defined security safeguards];

b: Maintains accountability for information system media during transport outside of controlled areas;

c: Documents activities associated with the transport of information system media; and

d: Restricts the activities associated with the transport of information system media to authorized personnel.