MP-5(3)

Requirement

Employ an identified custodian during transport of system media outside of controlled areas.

Discussion

Identified custodians provide organizations with specific points of contact during the media transport process and facilitate individual accountability. Custodial responsibilities can be transferred from one individual to another if an unambiguous custodian is identified.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System media protection policy; procedures addressing media transport; physical and environmental protection policy and procedures; system media transport records; audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with system media transport responsibilities; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for identifying and employing a custodian to transport media outside of controlled areas].

ID	Assessment Objectives
MP-05(03)[01]	a custodian to transport system media outside of controlled areas is identified;
MP-05(03)[02]	the identified custodian is employed during the transport of system media outside of controlled areas.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!