MA.L2-3.7.4 Media Inspection
Check media containing diagnostic and test programs for malicious code before the media are used in organizational systems.
Source: NIST SP 800-171 Rev 2 3.7.4
Discussion: If, upon inspection of media containing maintenance diagnostic and test programs, organizations determine that the media contain malicious code, the incident is handled consistent with incident handling policies and procedures.
SPRS Score: 3