Mechanisms exist to:
- Physically control and securely store digital and non-digital media within controlled areas using organization-defined security measures; and
- Protect system media until the media are destroyed or sanitized using approved equipment, techniques and procedures.
Mapped framework controls
ISO 27002
- A.7.10
NIST 800-53
Control questions
Does the organization:
- Physically control and securely store digital and non-digital media within controlled areas using organization-defined security measures; and
- Protect system media until the media are destroyed or sanitized using approved equipment, techniques and procedures?