Skip to main content
MuonPartners
Services
Architecture

Solution design and technology roadmapping

Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security

Security assessments, IAM, and compliance

AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform

Network architecture and cloud platforms

Network DesignCloud StrategyModernisation
Enterprise Architecture

Business-technology alignment

Business AlignmentPortfolio AnalysisGovernance
View all services
ProjectsCase StudiesInsightsToolsAbout
Contact Us

Services

Architecture
Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security
AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform
Network DesignCloud StrategyModernisation
Enterprise Architecture
Business AlignmentPortfolio AnalysisGovernance
ProjectsCase StudiesInsightsToolsAboutContact
Get in Touch
MuonPartners

Strategic technology consulting for Australian organisations navigating complexity.

Services

  • Architecture
  • Cyber Security
  • Network and Platform
  • Enterprise Architecture

Company

  • About
  • Products
  • Frameworks
  • Cross-Framework Mapping
  • Projects
  • Case Studies
  • Insights
  • Contact

Contact

  • [email protected]
  • Australia
  • LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy PolicyTerms of Service
  1. Frameworks
  2. >SP 800-53
  3. >Media Protection
  4. >SP800-53-MP-4
SP800-53-MP-4Active

Media Storage

Statement

Physically control and securely store types of digital media; types of non-digital media; controlled areas within types of digital media; types of non-digital media; controlled areas ; and Protect system media types defined in MP-4a until the media are destroyed or sanitized using approved equipment, techniques, and procedures.

Location

Control Family
Media Protection

Control Details

Identifier
SP800-53-MP-4
Family
MP

Organisation-Defined Parameters

mp-04_odp.01
types of digital media
mp-04_odp.02
types of non-digital media
mp-04_odp.03
types of digital media
mp-04_odp.04
types of non-digital media
mp-04_odp.05
controlled areas
mp-04_odp.06
controlled areas

Supplemental Guidance

System media includes digital and non-digital media. Digital media includes flash drives, diskettes, magnetic tapes, external or removable hard disk drives (e.g., solid state, magnetic), compact discs, and digital versatile discs. Non-digital media includes paper and microfilm. Physically controlling stored media includes conducting inventories, ensuring procedures are in place to allow individuals to check out and return media to the library, and maintaining accountability for stored media. Secure storage includes a locked drawer, desk, or cabinet or a controlled media library. The type of media storage is commensurate with the security category or classification of the information on the media. Controlled areas are spaces that provide physical and procedural controls to meet the requirements established for protecting information and systems. Fewer controls may be needed for media that contains information determined to be in the public domain, publicly releasable, or have limited adverse impacts on organizations, operations, or individuals if accessed by other than authorized personnel. In these situations, physical access controls provide adequate protection.

Assessment Objective

types of digital media are physically controlled; types of non-digital media are physically controlled; types of digital media are securely stored within controlled areas; types of non-digital media are securely stored within controlled areas; system media types (defined in MP-04_ODP[01], MP-04_ODP[02], MP-04_ODP[03], MP-04_ODP[04]) are protected until the media are destroyed or sanitized using approved equipment, techniques, and procedures.

No cross-framework mappings available

← Back to Media Protection
Media Protection30 controls
SP800-53-MP-1Policy and ProceduresSP800-53-MP-2Media AccessSP800-53-MP-2(1)Automated Restricted AccessSP800-53-MP-2(2)Cryptographic ProtectionSP800-53-MP-3Media MarkingSP800-53-MP-4Media StorageSP800-53-MP-4(1)Cryptographic ProtectionSP800-53-MP-4(2)Automated Restricted AccessSP800-53-MP-5Media TransportSP800-53-MP-5(1)Protection Outside of Controlled AreasSP800-53-MP-5(2)Documentation of ActivitiesSP800-53-MP-5(3)CustodiansSP800-53-MP-5(4)Cryptographic ProtectionSP800-53-MP-6Media SanitizationSP800-53-MP-6(1)Review, Approve, Track, Document, and VerifySP800-53-MP-6(2)Equipment TestingSP800-53-MP-6(3)Nondestructive TechniquesSP800-53-MP-6(4)Controlled Unclassified InformationSP800-53-MP-6(5)Classified InformationSP800-53-MP-6(6)Media DestructionSP800-53-MP-6(7)Dual AuthorizationSP800-53-MP-6(8)Remote Purging or Wiping of InformationSP800-53-MP-7Media UseSP800-53-MP-7(1)Prohibit Use Without OwnerSP800-53-MP-7(2)Prohibit Use of Sanitization-resistant MediaSP800-53-MP-8Media DowngradingSP800-53-MP-8(1)Documentation of ProcessSP800-53-MP-8(2)Equipment TestingSP800-53-MP-8(3)Controlled Unclassified InformationSP800-53-MP-8(4)Classified Information