MP-2 What is the solution and how is it implemented? MP-2 Additional FedRAMP Requirements and Guidance: The service provider defines types of digital and non-digital media. The media Requirement 1: types are approved and accepted by the JAB. Requirement 2: The service provider defines a list of individuals with authorized access to defined media types. The list of authorized individuals is approved and accepted by the JAB. Requirement 3: The service provider defines the types of security measures to be used in protecting media types. The security measures are approved and accepted by the JAB. MP-2 Additional FedRAMP Control Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> MP-2 What is the solution and how is it implemented? Req. 1
MP-2 What is the solution and how is it implemented? MP-2 Additional FedRAMP Requirements and Guidance: Requirement 1: The service provider defines types of digital and non-digital media. The media types are approved and accepted by the JAB. Requirement 2: The service provider defines a list of individuals with authorized access to defined media types. The list of authorized individuals is approved and accepted by the JAB. Requirement 3: The service provider defines the types of security measures to be used in protecting media types. The security measures are approved and accepted by the JAB. MP-2 Additional FedRAMP Control Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> MP-2 What is the solution and how is it implemented? Req. 1