Media Protection (03.09)

The Media Protection family requires organizations to safeguard controlled unclassified information stored on any physical or digital media, limit access to authorized users, and employ encryption or other protective measures during storage and transmission. It also mandates proper sanitization, disposal, or destruction of media when it is no longer needed to prevent unauthorized retrieval.