NIST SP 800-53 Rev 5
MP - Media Protection

NIST SP 800-53 Rev 5 NIST800-MP-5: MP-5 Media Transport

a. Protect and control [Assignment: organization-defined types of system media] during transport outside of controlled areas using [Assignment: organization-defined controls]; b. Maintain accountability for system media during transport outside of controlled areas; c. Document activities associated with the transport of system media; and d. Restrict the activities associated with the transport of system media to authorized personnel.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 47 controls across 22 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CMMC 2.0 · 6 controls

ISO 27701:2019 · 5 controls

  • 6.10.2 Information transfer
  • 6.5.3 Media handling
  • 7.4.9 PII transmission controls
  • 8.4.2 Return, transfer or disposal of PII
  • 8.4.3 PII transmission controls

HIPAA Security Rule · 4 controls

ISO 27001:2022 · 4 controls

  • 5.14 Information transfer
  • 7.10 Storage media
  • 7.9 Security of assets off-premises
  • 8.33 Test information

ISO 27002:2022 · 4 controls

  • 5.11 Return of assets
  • 5.14 Information transfer
  • 7.10 Storage media
  • 7.9 Security of assets off-premises

NIST SP 800-66 Rev 2 · 3 controls

PCI DSS 4.0 · 3 controls

  • 9.4.1.1 9.4.1.1 Secure storage location for offline backups
  • 9.4.3 9.4.3 Securing media sent outside the facility
  • 9.4.5 9.4.5 Inventory logs of electronic media

SOC 2 · 3 controls

  • SOC2-C1.2 C1.2 Disposing of confidential information
  • SOC2-CC6.4 CC6.4 Restricting physical access to facilities and assets
  • SOC2-CC6.7 CC6.7 Restricting and protecting information in transmission, movement and removal
  • CCM-DCS-02 Off-Site Transfer Authorization Policy and Procedures
  • CCM-DCS-04 Secure Media Transportation Policy and Procedures
  • ANSSI-HYG-30 Apply Physical Protection Measures to Mobile Devices

C5 (Germany) · 1 control

  • C5-AM-02 Acceptable Use and Safe Handling of Assets Policy

CIS Controls v8 · 1 control

  • CIS-3.9 Encrypt Data on Removable Media

FedRAMP High · 1 control

  • MP-5 Media Transport

FedRAMP Moderate · 1 control

  • MP-5 Media Transport

ISO 22301:2019 · 1 control

  • 7.5.3 Control of documented information

ISO/IEC 42001:2023 · 1 control

  • 7.5.3 Control of documented information
  • NIST-CSF-PR.DS-01 The confidentiality, integrity, and availability of data-at-rest are protected

NIST SP 800-171 · 1 control

  • MP-5 MP-5 Media Transport
  • MP-5 MP-5 Media Transport

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in MP - Media Protection

You are reading one control. How much of NIST SP 800-53 Rev 5 have you already done?

NIST SP 800-53 Rev 5 NIST800-MP-5 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of NIST SP 800-53 Rev 5 your existing evidence covers. Hold ISO 27001:2022 and 163 of 1014 NIST SP 800-53 Rev 5 controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 342 were rejected on the ISO 27001:2022 pair alone.

Query this from an agent

The graph holds this control, the 47 it maps to, and the evidence behind each claim, over MCP and REST.