---

id: "MP-04(02)" title: "Automated Restricted Access" family: "MP" family_name: "Media Protection" sort_id: "mp-04.02" priority: "P2" implementation_level: "organization" parent: "MP-04" enhancement: True

---

Statement

Restrict access to media storage areas and log access attempts and access granted using {{ insert: param, mp-4.2_prm_1 }}.

Guidance

Automated mechanisms include keypads, biometric readers, or card readers on the external entries to media storage areas.

Assessment Objective: access to media storage areas is restricted using {{ insert: param, mp-04.02_odp.01 }};

Assessment Objective: access attempts to media storage areas are logged using {{ insert: param, mp-04.02_odp.02 }};

Assessment Objective: access granted to media storage areas is logged using {{ insert: param, mp-04.02_odp.03 }}.

System media protection policy

procedures addressing media storage

access control policy and procedures

physical and environmental protection policy and procedures

system design documentation

system configuration settings and associated documentation

media storage facilities

access control devices

access control records

audit records

system security plan

other relevant documents or records

Organizational personnel with system media protection and storage responsibilities

organizational personnel with information security responsibilities

system/network administrators

Automated mechanisms restricting access to media storage areas

automated mechanisms auditing access attempts and access granted to media storage areas