Field notebook · source record
MP-4
Media ProtectionMedia Storage
The statement below is source material, not a generated control summary.
Source statement
Physically control and securely store {{ insert: param, mp-4_prm_1 }} within {{ insert: param, mp-4_prm_2 }} ; and Protect system media types defined in MP-4a until the media are destroyed or sanitized using approved equipment, techniques, and procedures.
Guidance
System media includes digital and non-digital media. Digital media includes flash drives, diskettes, magnetic tapes, external or removable hard disk drives (e.g., solid state, magnetic), compact discs, and digital versatile discs. Non-digital media includes paper and microfilm. Physically controlling stored media includes conducting inventories, ensuring procedures are in place to allow individuals to check out and return media to the library, and maintaining accountability for stored media. Secure storage includes a locked drawer, desk, or cabinet or a controlled media library. The type of media storage is commensurate with the security category or classification of the information on the media. Controlled areas are spaces that provide physical and procedural controls to meet the requirements established for protecting information and systems. Fewer controls may be needed for media that contains information determined to be in the public domain, publicly releasable, or have limited adverse impacts on organizations, operations, or individuals if accessed by other than authorized personnel. In these situations, physical access controls provide adequate protection.
Organization-defined parameters
Organization-defined · unresolvedCatalog reference only. No project value has been assigned or evaluated here.
- mp-4_prm_1
organization-defined types of digital and/or non-digital media
- mp-4_prm_2
organization-defined controlled areas
- mp-04_odp.01
types of digital media
Source guidance- types of digital media to be physically controlled are defined (if selected);
- mp-04_odp.02
types of non-digital media
Source guidance- types of non-digital media to be physically controlled are defined (if selected);
- mp-04_odp.03
types of digital media
Source guidance- types of digital media to be securely stored are defined (if selected);
- mp-04_odp.04
types of non-digital media
Source guidance- types of non-digital media to be securely stored are defined (if selected);
- mp-04_odp.05
controlled areas
Source guidance- controlled areas within which to securely store digital media are defined;
- mp-04_odp.06
controlled areas
Source guidance- controlled areas within which to securely store non-digital media are defined;
Assessment reference context
Retained, not activated.1 source assessment records and 5 objective nodes are available as reference context. This surface runs none of them.
mp-4_objMP-045 objective nodes
- {{ insert: param, mp-04_odp.01 }} are physically controlled;
- {{ insert: param, mp-04_odp.02 }} are physically controlled;
- {{ insert: param, mp-04_odp.03 }} are securely stored within {{ insert: param, mp-04_odp.05 }};
- {{ insert: param, mp-04_odp.04 }} are securely stored within {{ insert: param, mp-04_odp.06 }};
- system media types (defined in MP-04_ODP[01], MP-04_ODP[02], MP-04_ODP[03], MP-04_ODP[04]) are protected until the media are destroyed or sanitized using approved equipment, techniques, and procedures.
Reference method and authority
- InputExact release, source digest, control ID, and cited source fields
- Agent taskPrepare a bounded evidence request or test-plan draft
- Fail closedAbstain when source, scope, or assessment identity is missing
- Human acceptanceA named reviewer decides whether evidence supports the conclusion