NIST800-MP-7 MP-7 Media Use
NIST800-MP-7 in NIST SP 800-53 Rev 5 (NIST SP 800-53 Rev 5, Release 5.2.0). All NIST SP 800-53 Rev 5 controls held. Open NIST SP 800-53 Rev 5 on the standards site.
The control as we hold it
MP-7 Media Use. a. [Selection: restrict; prohibit] the use of [Assignment: organization-defined types of system media] on [Assignment: organization-defined systems or system components] using [Assignment: organization-defined controls]; and b. Prohibit the use of portable storage devices in organizational systems when such devices have no identifiable owner.
Reviewed and closest counterparts in the other frameworks
Reviewed rows come from a released pair; a closest match is the nearest held text and is not a reviewed row.
SOC 2
- SOC2-C1.2 C1.2 Disposing of confidential information (closest match)
- SOC2-CC6.5 CC6.5 Protecting data on assets until disposal (closest match)
- SOC2-CC6.7 CC6.7 Restricting and protecting information in transmission, movement and removal (closest match)
HIPAA Security Rule
- 164.310(d)(1) Device and Media Controls (Standard) (closest match)
What an auditor commonly asks for
General guidance for this control area (domain: MP - Media Protection), in our words, not a statement of the standard and not binding on an assessor.
- the media-protection policy
- the media-access and marking records
- the sanitisation and disposal records