The organization: a. Develops, documents, and disseminates to {{ insert: param, mp-1_prm_1 }}: 1. A media protection policy that addresses purpose, scope, roles, responsibilities, management ...

The organization restricts access to {{ insert: param, mp-2_prm_1 }} to {{ insert: param, mp-2_prm_2 }}.

The organization: a. Marks information system media indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information; and b. Exempts {{ in...

The organization: a. Physically controls and securely stores {{ insert: param, mp-4_prm_1 }} within {{ insert: param, mp-4_prm_2 }}; and b. Protects information system media until the media are...

The organization employs automated mechanisms to restrict access to media storage areas and to audit access attempts and access granted.

The organization: a. Protects and controls {{ insert: param, mp-5_prm_1 }} during transport outside of controlled areas using {{ insert: param, mp-5_prm_2 }}; b. Maintains accountability for in...

The organization employs an identified custodian during transport of information system media outside of controlled areas.

The information system implements cryptographic mechanisms to protect the confidentiality and integrity of information stored on digital media during transport outside of controlled areas.

The organization: a. Sanitizes {{ insert: param, mp-6_prm_1 }} prior to disposal, release out of organizational control, or release for reuse using {{ insert: param, mp-6_prm_2 }} in accordance w...

The organization reviews, approves, tracks, documents, and verifies media sanitization and disposal actions.

The organization tests sanitization equipment and procedures {{ insert: param, mp-6.2_prm_1 }} to verify that the intended sanitization is being achieved.

The organization applies nondestructive sanitization techniques to portable storage devices prior to connecting such devices to the information system under the following circumstances: {{ insert: ...

The organization enforces dual authorization for the sanitization of {{ insert: param, mp-6.7_prm_1 }}.

The organization provides the capability to purge/wipe information from {{ insert: param, mp-6.8_prm_1 }} either remotely or under the following conditions: {{ insert: param, mp-6.8_prm_2 }}.

The organization {{ insert: param, mp-7_prm_1 }} the use of {{ insert: param, mp-7_prm_2 }} on {{ insert: param, mp-7_prm_3 }} using {{ insert: param, mp-7_prm_4 }}.

The organization prohibits the use of portable storage devices in organizational information systems when such devices have no identifiable owner.

The organization prohibits the use of sanitization-resistant media in organizational information systems.

The organization: a. Establishes {{ insert: param, mp-8_prm_1 }} that includes employing downgrading mechanisms with {{ insert: param, mp-8_prm_2 }}; b. Ensures that the information system medi...

The organization documents information system media downgrading actions.

The organization employs {{ insert: param, mp-8.2_prm_1 }} of downgrading equipment and procedures to verify correct performance {{ insert: param, mp-8.2_prm_2 }}.

The organization downgrades information system media containing {{ insert: param, mp-8.3_prm_1 }} prior to public release in accordance with applicable federal and organizational standards and poli...

The organization downgrades information system media containing classified information prior to release to individuals without required access authorizations in accordance with NSA standards and po...