MP.L2-3.8.2 Media Access

Limit access to CUI on system media to authorized users.

Source: NIST SP 800-171 Rev 2 3.8.2

Discussion: Access can be limited by physically controlling system media and secure storage areas. Physically controlling system media includes conducting inventories, ensuring procedures are in place to allow individuals to check out and return system media to the media library, and maintaining accountability for all stored media. Secure storage includes a locked drawer, desk, or cabinet, or a controlled media library

SPRS Score: 3