Navigate

CCI-000995

CCI-000995 Definition

Develop and document an organization-level; mission/business process-level; and/or system-level media protection policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000995.

Control	Description
MP-1	The organization: a: Develops, documents, and disseminates to [one of ]: 1: A media protection policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and 2: Procedures to facilitate the implementation of the media protection policy and associated media protection controls; and b: Reviews and updates the current: 1: Media protection policy [one of ]; and 2: Media protection procedures [one of ].

Control

Description

MP-1

The organization:

a: Develops, documents, and disseminates to [one of ]:
- 1: A media protection policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- 2: Procedures to facilitate the implementation of the media protection policy and associated media protection controls; and

b: Reviews and updates the current:
- 1: Media protection policy [one of ]; and
- 2: Media protection procedures [one of ].