CCI-004215

Protect system media types defined in MP-4a until the media are destroyed or sanitized using approved procedures.

Implementation Guidance

Determine if system media types (defined in MP-04_ODP[01], MP-04_ODP[02], MP-04_ODP[03], MP-04_ODP[04]) are protected until the media are destroyed or sanitized using approved equipment, techniques, and procedures.

Validation Procedures

Examine: [SELECT FROM: System media protection policy; procedures addressing media storage; physical and environmental protection policy and procedures; access control policy and procedures; system media; designated controlled areas; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system media protection and storage responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for storing information media; mechanisms supporting and/or implementing secure media storage/media protection].

The controls below (if any) were marked by NIST as being related to CCI-004215.