controlMP-3

Media Marking (MP-3)

Mark system media indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information; and Exempt [organization-defined] from marking if the media remain within [organization-defined].

Security Baselines

MODERATEHIGHLOW

media-protectionsanitization

Why These Connect

Maps To2

These are equivalent or closely aligned requirements in other frameworks.

Baselined In2

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports6

These related controls work together — a change to one may affect the others.

Related Controls(5)

AC-16Security and Privacy Attributes (AC-16)CP-9System Backup (CP-9)

LMH

MP-5Media Transport (MP-5)

PE-22Component Marking (PE-22)SI-12Information Management and Retention (SI-12)

LMH

Cross-Framework Mappings(2)

ISO 27001ISO/IEC 27001:20221 mappingFinal

NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022

HIPAAHIPAA Security Rule2 mappingsFinal

NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5

Organization-Defined Parameters(2)

Assignmentorganization-defined types of media exempted from marking

Assignmentorganization-defined controlled areas