MP-1 MP-1 (a) (1) CCI-000995 High Moderate Low High Moderate Low DoDI 5200.01 and DoDM 5200.01 Vol. 1-4 meet the DoD requirements for media protection policy and procedures. DoD Components are automatically compliant with this CCI because they are covered by the DoD level policies, DoDI 5200.01 and DoDM 5200.01 Vol. 1-4. Automatically compliant with this CCI because they are covered at the DoD level MP-1 MP-1 (a) (1) CCI-000996 High Moderate Low High Moderate Low DoDI 5200.01 and DoDM 5200.01 Vol. 1-4 meet the DoD requirements for media protection policy and procedures. DoD Components are automatically compliant with this CCI because they are covered by the DoD level policies, DoDI 5200.01 and DoDM 5200.01 Vol. 1-4. Automatically compliant with this CCI because they are covered at the DoD level MP-1 MP-1 (a) (2) CCI-000999 High Moderate Low High Moderate Low DoDI 5200.01 and DoDM 5200.01 Vol. 1-4 meet the DoD requirements for media protection policy and procedures. DoD Components are automatically compliant with this CCI because they are covered by the DoD level policies, DoDI 5200.01 and DoDM 5200.01 Vol. 1-4. Automatically compliant with this CCI because they are covered at the DoD level MP-1 MP-1 (a) (2) CCI-001000 High Moderate Low High Moderate Low DoDI 5200.01 and DoDM 5200.01 Vol. 1-4 meet the DoD requirements for media protection policy and procedures. DoD Components are automatically compliant with this CCI because they are covered by the DoD level policies, DoDI 5200.01 and DoDM 5200.01 Vol. 1-4. Automatically compliant with this CCI because they are covered at the DoD level
MP-6 (2) MP-6 (2) CCI-001031 High The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as every 180 days. Automatically compliant with this CCI because they are covered at the DoD level MP-6 (3) MP-6 (3) CCI-001032 High The organization conducting the inspection/assessment obtains and examines media sanitization records, audit records, and any other relevant documents or records. The objective of the reviews is to confirm the organization is in compliance with the list of defined circumstances requiring the sanitization of portable storage devices prior to connecting such devices to the information system. The system is not considered a HIGH level. Therefore, this AP is not applicable.
MEDIA INFORMATION Make/Vendor: Model Number: Serial Number: Media Property Number: Media Type: Source: Classification: Data Backed Up: Yes No Unknown Backup Location: SANITIZATION DETAILS Method Type: Purge Damage Destruct Method Used: Degauss Overwrite Block Erase Crypto Erase Other Method Details: Tool Used (include version): Verification Method: Full Quick Sampling Other Post Sanitization Classification: Notes: MEDIA DESTINATION Internal Reuse External Reuse Recycling Manufacturer Other Details: SIGNATURE I attest that the information provided on this statement is accurate to the best of my knowledge Signature: Date: VALIDATION Name: Title: Organization: Location: Phone: Signature: Date: ENCLOSURE 2 – REMOVABLE MEDIA INVENTORY
The following table contains the inventory of {ACRONYM} removable storage devices and their compliance status with the . STO-ALL-010 IA Approved STO-ALL-030 Device ID Authorized Users Make Model STO-ALL-02 Gov. Owned STO-DRV-010 Password/PIN STO-DRV-021 NSA Approved STO-DRV-025 DAR Enforced STO-DRV-040 Signed Firmware