CCI-002584

Restrict or prohibit the use of organization-defined types of system media on organization-defined systems or system components using organization-defined controls.

Implementation Guidance

The organization being inspected/assessed documents and enforces controls for the use of media defined in MP-7, CCI 2581 on systems defined in MP-7, CCI 2582 using security safeguards defined in MP-7, CCI 2583.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented controls and examines information system procedures associated with the use of media to ensure the organization being inspected/assessed documents and enforces controls for the use of media defined in MP-7, CCI 2581 on systems defined in MP-7, CCI 2582 using security safeguards defined in MP-7, CCI 2583.

Compelling Evidence

1.) Signed and dated SOP or TTP showing enforcement controls for specific media types

The controls below (if any) were marked by NIST as being related to CCI-002584.