CCI-001026

The organization employs an identified custodian during transport of information system media outside of controlled areas.

Implementation Guidance

The organization being inspected/assessed identifies and documents a custodian that is at all times responsible for the transport of the all information system media, from pick-up to final delivery and receipt acknowledgement.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation identifying the custodian that is at all times responsible for the transport of the all information system media, from pick-up to final delivery and receipt acknowledgement.

Compelling Evidence

1.) Policy to ensure that organization identifies and documents a custodian who is responsible at all times for the transport of the information system media, from pick-up to final delivery and receipt acknowledgement of the information system media. 2.) Personnel training documentation on the guidelines of transporting information system media.

The controls below (if any) were marked by NIST as being related to CCI-001026.