Information Technology Reference
In-Depth Information
Category/
Subcategory/
Element
Control
Reference
Control Summary
Interpretation
MP-3
Media labeling
The organization: (i) affixes
external labels to removable
information system media and
information system output
indicating the distribution
limitations, handling caveats, and
applicable security markings (if
any) of the information; and (ii)
exempts [assignment:
organization-defined list of media
types or hardware components]
from labeling so long as they
remain within [assignment:
organization-defined protected
environment].
MP-4
Media storage
The organization physically
controls and securely stores
information system media within
controlled areas.
MP-5
Media transport
The organization protects and
controls information system
media during transport outside of
controlled areas and restricts the
activities associated with
transport of such media to
authorized personnel.
MP-6
Media sanitization
and disposal
The organization sanitizes
information system media, both
digital and nondigital, prior to
disposal or release for reuse.
