MA-3(2): Inspect Media
Control Family:
Parent Control:
CSF v1.1 References:
Threats Addressed:
Baselines:
- Moderate
- High
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- MA-3(2): Inspect Media
Control Statement
Check media containing diagnostic and test programs for malicious code before the media are used in the system.
Supplemental Guidance
If, upon inspection of media containing maintenance, diagnostic, and test programs, organizations determine that the media contains malicious code, the incident is handled consistent with organizational incident handling policies and procedures.