| Description | The organization defines controlled areas where organization-defined types of digital and/or non-digital media are physically controlled and securely stored. |
|---|---|
| Assessment Procedure | MP-4.3 |
| Organization Guidance | |
| Auditor Guidance |
No STIG rules exist.