NIST SP 800-53 Revision 5.1 HIGH
MP Media Protection

NIST SP 800-53 Revision 5.1 HIGH MP-2: Media Access

Restrict access to FedRAMP-defined types of digital and non-digital media to authorized personnel.

What else in your programme already covers this

This control maps to 26 controls across 13 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CIS Controls v8 · 5 controls

  • CIS-10.3 Disable Autorun and Autoplay for Removable Media
  • CIS-3.3 Configure Data Access Control Lists
  • CIS-3.9 Encrypt Data on Removable Media
  • CIS-4.11 Enforce Remote Wipe Capability on Portable End-User Devices
  • CIS-6.7 Centralize Access Control

SOC 2 · 5 controls

  • SOC2-CC6.1 Implements logical access security software, infrastructure and architectures over protected information assets
  • SOC2-CC6.2 Prior to granting access, registration and authorization processes are established
  • SOC2-CC6.3 Role-based access and least privilege are enforced
  • SOC2-CC6.4 Restricts physical access to facilities and protected information assets (for example, data center facilities, back-up media storage, and other sensitive locations) to authorized personnel to meet the entity's objectives
  • SOC2-P5.1 Personal information is accessed only by authorized personnel

ISO 27002:2022 · 3 controls

  • 7.10 Storage media
  • 7.12 Cabling security
  • 7.7 Clear desk and clear screen

CMMC 2.0 · 2 controls

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

ISO 27001:2022 · 2 controls

  • 7.10 Storage media
  • 8.3 Information access restriction

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 1 control

  • ANSSI-HYG-15 Protect Against Threats Related to Removable Media

C5 (Germany) · 1 control

  • C5-AM-02 Acceptable Use and Safe Handling of Assets Policy

HIPAA Security Rule · 1 control

NIST SP 800-171 Rev 3 · 1 control

NIST SP 800-53 Rev 5 · 1 control

NIST SP 800-66 Rev 2 · 1 control

PCI DSS 4.0 · 1 control

  • 9.4.1 Media with cardholder data physically secured

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in MP Media Protection

Query this from an agent

The graph holds this control, the 26 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-53 Revision 5.1 HIGH controls