Other title: Media Protection Controls 2100-17

Revision history: Original policy.; Effective date: 06/18/2018.; Policy number: 2100-17.; Includes bibliographical references.This policy establises the media protection requirements for establishing an effective media protection program to manage data and information risks that are related to media access, storage, transport, and protection. Media protection shall be based on security best practices with regard to media usage, storage, and disposal. A glossary of terms found in this policy is located in Section 8.0 Definitions. In addition, references to National Institute of Standards in Technology (NIST) Special Publication (SP) 800-53 family identifiers and control numbers are provided in parentheticals next to requirement headers, where applicable. All media associated with Ohio Department of Administrative Services (DAS)-managed system assets are included in the scope of this policy