|
controlMP-2
Media Access (MP-2)
Restrict access to [organization-defined] to [organization-defined].
Security Baselines
LOWMODERATEHIGH
media-protectionsanitization
Why These Connect
Maps To2
These are equivalent or closely aligned requirements in other frameworks.
Baselined In3
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports20
These related controls work together — a change to one may affect the others.
Enhances2
These enhancements add specific capabilities or refinements to the base control.
Related Controls(15)
AC-19Access Control for Mobile Devices (AC-19)
LMH
AU-9Protection of Audit Information (AU-9)LMH
CP-2Contingency Plan (CP-2)LMH
MA-5Maintenance Personnel (MA-5)LMH
CP-9System Backup (CP-9)LMH
CP-10System Recovery and Reconstitution (CP-10)LMH
MP-4Media Storage (MP-4)MH
MP-6Media Sanitization (MP-6)LMH
PE-2Physical Access Authorizations (PE-2)LMH
PE-3Physical Access Control (PE-3)LMH
SC-12Cryptographic Key Establishment and Management (SC-12)LMH
SC-13Cryptographic Protection (SC-13)LMH
SC-34Non-modifiable Executable Programs (SC-34)SI-12Information Management and Retention (SI-12)LMH
PE-4Access Control for Transmission (PE-4)MH
Cross-Framework Mappings(2)
ISO 27001ISO/IEC 27001:20223 mappingsFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022
HIPAAHIPAA Security Rule4 mappingsFinal
NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5
Organization-Defined Parameters(4)
Assignmentorganization-defined types of digital media
Assignmentorganization-defined personnel or roles
Assignmentorganization-defined types of non-digital media
Assignmentorganization-defined personnel or roles