SC-34(2): Integrity Protection on Read-only Media

Threats Addressed:


(Not part of any baseline)

Previous Version:

Control Statement

Protect the integrity of information prior to storage on read-only media and control the media after such information has been recorded onto the media.

Supplemental Guidance

Controls prevent the substitution of media into systems or the reprogramming of programmable read-only media prior to installation into the systems. Integrity protection controls include a combination of prevention, detection, and response.