id: "MP-05(03)" title: "Custodians" family: "MP" family_name: "Media Protection" sort_id: "mp-05.03" priority: "P2" implementation_level: "organization" parent: "MP-05" enhancement: True
Statement
Employ an identified custodian during transport of system media outside of controlled areas.
Guidance
Identified custodians provide organizations with specific points of contact during the media transport process and facilitate individual accountability. Custodial responsibilities can be transferred from one individual to another if an unambiguous custodian is identified.
Assessment Objective: a custodian to transport system media outside of controlled areas is identified;
Assessment Objective: the identified custodian is employed during the transport of system media outside of controlled areas.
System media protection policy
procedures addressing media transport
physical and environmental protection policy and procedures
system media transport records
audit records
system security plan
other relevant documents or records
Organizational personnel with system media transport responsibilities
organizational personnel with information security responsibilities
Organizational processes for identifying and employing a custodian to transport media outside of controlled areas