MP-2: Media Access

access to types of digital media is restricted to personnel or roles ;

access to types of non-digital media is restricted to personnel or roles .

System media protection policy

procedures addressing media access restrictions

access control policy and procedures

physical and environmental protection policy and procedures

media storage facilities

access control records

system security plan

other relevant documents or records

Organizational personnel with system media protection responsibilities

organizational personnel with information security responsibilities

system/network administrators

Organizational processes for restricting information media

mechanisms supporting and/or implementing media access restrictions