CCI-001026

Implementation Guidance

The organization being inspected/assessed identifies and documents a custodian that is at all times responsible for the transport of the all information system media, from pick-up to final delivery and receipt acknowledgement.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation identifying the custodian that is at all times responsible for the transport of the all information system media, from pick-up to final delivery and receipt acknowledgement.

Compelling Evidence

1.) Policy to ensure that organization identifies and documents a custodian who is responsible at all times for the transport of the information system media, from pick-up to final delivery and receipt acknowledgement of the information system media. 2.) Personnel training documentation on the guidelines of transporting information system media.