Media Protection
What is Media Protection?
Security controls for protecting storage media including hard drives, USB devices, tapes, and optical media from unauthorized access and damage.
Terms that appear alongside media protection
Each of these is named in at least one of the same controls as media protection. The number is how many controls name both.
- encryption 3 shared controls
- integrity 3 shared controls
- fips 3 shared controls
- nist 3 shared controls
- accountability 3 shared controls
- audit 3 shared controls
- policy 2 shared controls
- vulnerability 2 shared controls
Frameworks that govern media protection
What the standards actually require on media protection
Requirements naming media protection across 6 standards, quoted from the control text.
Physically control and securely store system media holding CUI, in both paper and digital form.
MP.L2-3.8.1 · Media Protection →The organisation develops, documents and disseminates to defined personnel or roles a media protection policy at the selected organisation, business process and, or, system level that addresses purpose, scope, roles, responsibilities, management commitment, co...
canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::MP-01 · MP-01 Media protection policy and procedures →Implement NIST 800-53 CP Contingency Planning + MP Media Protection + SI System and Information Integrity families per MARS-E v2.0. Contingency Planning with Business Impact Analysis (BIA) + Recovery Time Objective (RTO) of 24 hours for Exchange consumer-facin...
MARS-E-Contingency-Media-Protection-System-Integrity-CP-MP-SI-Families-DR-COOP-Encryption-Sanitization · MARS-E Contingency + Media Protection + System Integrity + CP + MP + SI Families + DR + COOP →Protect system media that contain controlled unclassified information during storage, transport, and disposal, including marking, sanitisation, and access controls.
171-MP-1 · Media Protection →Dispose of CJI using the techniques and methods described in the Media Protection family.
fbi-cjis-security-policy::SR-12 · SR-12 Component Disposal →Address information security within the program, covering access to systems and data with least privilege, separation of duties and account monitoring, user and device identification and authentication, security awareness training, audit log maintenance and an...
CFTC-SS-3 · Information Security Category →Questions people ask about media protection
What is Media Protection?
Why is Media Protection important for compliance?
Which compliance frameworks address Media Protection?
Where can I learn more about Media Protection?
See how Media Protection applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.