MP-1—Policy and Procedures
>Control Description
Develop, document, and disseminate to authorized individuals: (a) Addresses purpose, scope, roles, responsibilities, management commitment, coordination among agency entities, and compliance; and (b) Is consistent with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines; and
Agency-level media protection policy that:
Procedures to facilitate the implementation of the media protection policy and the associated media protection controls;
Designate an individual with security responsibilities to manage the development, documentation, and dissemination of the media protection policy and procedures; and
Review and update the current media protection: 2
Policy at least annually and following any security incidents involving digital and/or non-digital media; and
Procedures at least annually and following any security incidents involving digital and/or non-digital media.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.