AM-06—Media Marking
>Control Description
Theme
Type
Policy/Standard
Asset Management Policy>Implementation Guidance
1. Ensure that a process is established and documented for media marking and handling, including distribution limitation. 2. Ensure that sensitive information containing media is marked as per the organization's media marking requirements as applicable. 3. Ensure that any exceptions are approved by management, documented and retained by authorized personnel.
>Testing Procedure
1. Inspect information system media marking to indicate the distribution limitations, handling caveats, and applicable security markings (if any) of the information. 2. Inspect exemption cases to validate that it must be approved by management and remain in a specific area.
>Audit Artifacts
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.