regelverk.org

03.08 – Media Protection

NIST SP 800-171 Rev. 3 – 03.08 – Media Protection

1.Kravtext (engelskt original)#

03.08.01 – Media Storage#

Physically control and securely store system media that contain CUI.

03.08.02 – Media Access#

Restrict access to CUI on system media to authorized personnel or roles.

03.08.03 – Media Sanitization#

Sanitize system media that contain CUI prior to disposal, release out of organizational control, or release for reuse.

03.08.04 – Media Marking#

Mark system media that contain CUI to indicate distribution limitations, handling caveats, and applicable CUI markings.

03.08.05 – Media Transport#

  • SR-03.08.05.a Protect and control system media that contain CUI during transport outside of controlled areas.
  • SR-03.08.05.b Maintain accountability of system media that contain CUI during transport outside of controlled areas.
  • SR-03.08.05.c Document activities associated with the transport of system media that contain CUI.

SP_800_171_03.08.06 – 03.08.06#

03.08.07 – Media Use#

  • SR-03.08.07.a Restrict or prohibit the use of [organization-defined types of system media].
  • SR-03.08.07.b Prohibit the use of removable system media without an identifiable owner.

SP_800_171_03.08.08 – 03.08.08#

03.08.09 – System Backup – Cryptographic Protection#

  • SR-03.08.09.a Protect the confidentiality of backup information.
  • SR-03.08.09.b Implement cryptographic mechanisms to prevent the unauthorized disclosure of CUI at backup storage locations.

National Institute of Standards and Technology, OSCAL release 1.1.0. Republished courtesy of the National Institute of Standards and Technology. CC0 1.0. Source.