MP-2(1) — Automated Restricted Access

This enhancement requires automated mechanisms to restrict access to media storage areas. Instead of relying solely on physical locks and manual sign-out logs, you use electronic controls.

Example 1: Install electronic access control (badge reader or keypad) on the door to your media storage room or cabinet. Log all access attempts and review them monthly. Configure alerts for access attempts outside business hours.

Example 2: For digital media access, configure Microsoft Purview Information Protection or a DLP solution to automatically restrict access to sensitive files based on classification labels. Only users with the appropriate permissions can access or copy media containing labeled content.