ComplianceNIST 800-53 control

NIST-MP-2 Media Access

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
MP Media Protection
Control
MP-2

Control statement

Restrict access to [Assignment: organization-defined types of digital and/or non-digital media] to [Assignment: organization-defined personnel or roles].

Discussion

System media includes digital and non-digital media. Digital media includes flash drives, diskettes, magnetic tapes, external or removable hard disk drives (e.g., solid state, magnetic), compact discs, and digital versatile discs. Non-digital media includes paper and microfilm. Denying access to patient medical records in a community hospital unless the individuals seeking access to such records are authorized healthcare providers is an example of restricting access to non-digital media. Limiting access to the design specifications stored on compact discs in the media library to individuals on the system development team is an example of restricting access to digital media.

Related

Related control · Compliance (14)

  • NIST-AC-19 Access Control for Mobile Devices NIST 800-53 control
  • NIST-AU-9 Protection of Audit Information NIST 800-53 control
  • NIST-CP-10 System Recovery and Reconstitution NIST 800-53 control
  • NIST-CP-2 Contingency Plan NIST 800-53 control
  • NIST-CP-9 System Backup NIST 800-53 control
  • NIST-MA-5 Maintenance Personnel NIST 800-53 control
  • NIST-MP-4 Media Storage NIST 800-53 control
  • NIST-MP-6 Media Sanitization NIST 800-53 control
  • NIST-PE-2 Physical Access Authorizations NIST 800-53 control
  • NIST-PE-3 Physical Access Control NIST 800-53 control
  • NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control
  • NIST-SC-13 Cryptographic Protection NIST 800-53 control
  • NIST-SC-34 Non-modifiable Executable Programs NIST 800-53 control
  • NIST-SI-12 Information Management and Retention NIST 800-53 control

Referenced by Compliance · has member (1)

  • NIST-MP Media Protection NIST 800-53 family

Referenced by Compliance · related control (14)

  • NIST-AC-19 Access Control for Mobile Devices NIST 800-53 control
  • NIST-AU-9 Protection of Audit Information NIST 800-53 control
  • NIST-CP-10(6) Component Protection NIST 800-53 enhancement
  • NIST-CP-2 Contingency Plan NIST 800-53 control
  • NIST-CP-9(7) Dual Authorization for Deletion or Destruction NIST 800-53 enhancement
  • NIST-MA-5 Maintenance Personnel NIST 800-53 control
  • NIST-MP-4 Media Storage NIST 800-53 control
  • NIST-MP-6(7) Dual Authorization NIST 800-53 enhancement
  • NIST-PE-2 Physical Access Authorizations NIST 800-53 control
  • NIST-PE-3 Physical Access Control NIST 800-53 control
  • NIST-PE-4 Access Control for Transmission NIST 800-53 control
  • NIST-SC-13 Cryptographic Protection NIST 800-53 control
  • NIST-SC-34(2) Integrity Protection on Read-only Media NIST 800-53 enhancement
  • NIST-SI-12 Information Management and Retention NIST 800-53 control