Media Access and Protection Policy and Procedures ISO 27001

Download Free Media Access and Protection Policy and Procedures ISO 27001
Objectives:
- Information system media protection policy; procedures addressing media access; access control policy and procedures; physical and environmental protection policy and procedures; media storage facilities; access control records; other relevant documents or records
- Organizational personnel with information system media protection

Procedures
- Examine information system media protection policy and procedures, access control policy and procedures, physical and environmental protection policy and procedures, or other relevant documents; reviewing for information system media types requiring restricted access and the measures to be employed to restrict access to only authorized individuals.
- Examine an agreed-upon representative sample of media access control records or other relevant records for an agreed-upon representative sample of information system media types identified
- Examine an agreed-upon representative sample of operations at media storage facilities and other relevant areas; observing for indication that the measures identified
- Examine an agreed-upon representative sample of operations at media storage facilities and other relevant areas; inspecting for indication that the measures identified
- Interview an agreed-upon representative sample of organizational personnel with information system media protection responsibilities; conducting focused discussions for further evidence that the measures identified

Objectives:
- The organization employs automated mechanisms to restrict access to media storage areas; and
- The organization employs automated mechanisms to audit access attempts and access granted

Procedures
- Examine information system media protection policy and procedures, access control policy and procedures, physical and environmental protection policy and procedures, security plan, or other relevant documents; reviewing for the automated mechanisms and configuration settings to be employed to restrict access to designated media storage areas.
- Examine documentation describing the current configuration settings for an agreed-upon specific sample of automated mechanisms=
- Examine an agreed-upon specific sample of media storage facilities;