controlMP-7

Media Use (MP-7)

[organization-defined] the use of [organization-defined] on [organization-defined] using [organization-defined] ; and Prohibit the use of portable storage devices in organizational systems when such devices have no identifiable owner.

Security Baselines

LOWMODERATEHIGH

media-protectionsanitization

Why These Connect

Maps To1

These are equivalent or closely aligned requirements in other frameworks.

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports9

These related controls work together — a change to one may affect the others.

Enhances2

These enhancements add specific capabilities or refinements to the base control.

Related Controls(7)

AC-19Access Control for Mobile Devices (AC-19)

LMH

MP-4Media Storage (MP-4)

AC-20Use of External Systems (AC-20)

LMH

PL-4Rules of Behavior (PL-4)

LMH

PM-12Insider Threat Program (PM-12)SC-34Non-modifiable Executable Programs (SC-34)SC-41Port and I/O Device Access (SC-41)

Cross-Framework Mappings(1)

ISO 27001ISO/IEC 27001:20222 mappingsFinal

NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022

Organization-Defined Parameters(4)

Assignmentorganization-defined types of system media

SelectionSelection (one or more): restrict / prohibit

Assignmentorganization-defined systems or system components

Assignmentorganization-defined controls

Control Enhancements(2)

MP-7(1)Prohibit Use Without Owner (MP-7(1))W

MP-7(2)Prohibit Use of Sanitization-resistant Media (MP-7(2))