Fedramp system Security Plan (ssp) High Baseline Template

Control Summary Information

Download 1.2 Mb.

Page	297/478
Date	16.12.2020
Size	1.2 Mb.
	#54609

1 ... 293 294 295 296 297 298 299 300 ... 478

FedRAMP-SSP-High-Baseline-Template
FedRAMP-SSP-High-Baseline-Template, North Carolina Summary Table of Ecoregion Characteristics

MP-2 Media Access (H)
MP-3 Media Labeling (M) (H)

Control Summary Information

Responsible Role:
Parameter MP-1(a):
Parameter MP-1(b)(1):
Parameter MP-1(b)(2):
Implementation Status (check all that apply): ☐ Implemented ☐ Partially implemented ☐ Planned ☐ Alternative implementation ☐ Not applicable
Control Origination (check all that apply): ☐ Service Provider Corporate ☐ Service Provider System Specific ☐ Service Provider Hybrid (Corporate and System Specific)

MP-1 What is the solution and how is it implemented?
Part a
Part b

MP-2 Media Access (H)

The organization restricts access to [FedRAMP Assignment: any digital and non-digital media deemed sensitive] to [Assignment: organization-defined personnel or roles].

MP-2	Control Summary Information
Responsible Role:
Parameter MP-2-1:
Parameter MP-2-2:
Implementation Status (check all that apply): ☐ Implemented ☐ Partially implemented ☐ Planned ☐ Alternative implementation ☐ Not applicable
Control Origination (check all that apply): ☐ Service Provider Corporate ☐ Service Provider System Specific ☐ Service Provider Hybrid (Corporate and System Specific) ☐ Configured by Customer (Customer System Specific) ☐ Provided by Customer (Customer System Specific) ☐ Shared (Service Provider and Customer Responsibility) ☐ Inherited from pre-existing FedRAMP Authorization for Click here to enter text. ,

MP-2 What is the solution and how is it implemented?

MP-3 Media Labeling (M) (H)

The organization:

Marks information system media indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information; and
Exempts [FedRAMP Assignment: no removable media types] from marking as long as the media remain within [Assignment: organization-defined controlled areas].

MP-3(b) Additional FedRAMP Requirements and Guidance:

Guidance: Second parameter in MP-3(b)-2 is not applicable.

MP-3	Control Summary Information
Responsible Role:
Parameter MP-3(b)-1:
Parameter MP-3(b)-2: Not applicable
Implementation Status (check all that apply): ☐ Implemented ☐ Partially implemented ☐ Planned ☐ Alternative implementation ☐ Not applicable
Control Origination (check all that apply): ☐ Service Provider Corporate ☐ Service Provider System Specific ☐ Service Provider Hybrid (Corporate and System Specific) ☐ Configured by Customer (Customer System Specific) ☐ Provided by Customer (Customer System Specific) ☐ Shared (Service Provider and Customer Responsibility) ☐ Inherited from pre-existing FedRAMP Authorization for Click here to enter text. ,

MP-3 What is the solution and how is it implemented?
Part a
Part b

Download 1.2 Mb.

Share with your friends: