MP-5(4): Cryptographic Protection

Control Family:

Media Protection

Parent Control:

MP-5: Media Transport

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.PT-2

Threats Addressed:

Tampering
Information Disclosure

Baselines:

Moderate
High

Control is withdrawn in the next version of this control set and incorporated into: SC-28(1): Cryptographic Protection.

Control Statement

The information system implements cryptographic mechanisms to protect the confidentiality and integrity of information stored on digital media during transport outside of controlled areas.

Supplemental Guidance

This control enhancement applies to both portable storage devices (e.g., USB memory sticks, compact disks, digital video disks, external/removable hard disk drives) and mobile devices with storage capability (e.g., smart phones, tablets, E-readers).