CCI-001026

Implementation Guidance

Determine if: - a custodian to transport system media outside of controlled areas is identified. - the identified custodian is employed during the transport of system media outside of controlled areas.

Validation Procedures

Examine: [SELECT FROM: System media protection policy; procedures addressing media transport; physical and environmental protection policy and procedures; system media transport records; audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system media transport responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for identifying and employing a custodian to transport media outside of controlled areas].