MP-5(1) — Protection Outside of Controlled Areas

This enhancement is incorporated into the base MP-5 control. Media transported outside controlled areas needs specific protections — encryption, physical safeguards, and custody controls.

Example 1: Issue tamper-evident bags for transporting media outside your facility. When the recipient opens the bag, any tampering is visible. Log the bag's serial number in your transport record and have the recipient confirm the seal was intact upon delivery.

Example 2: For electronic transport, ensure all files are encrypted before transfer. Use Microsoft 365 sensitivity labels with encryption, or encrypt files using 7-Zip with AES-256 before attaching to email or uploading to a file sharing service.