MP-2 Control Summary Information Responsible Role: Parameter MP-2-1: Parameter MP-2-2: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , MP-2 What is the solution and how is it implemented? MP-3 Media Labeling (M) (H) The organization: Marks information system media indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information; and Exempts [FedRAMP Assignment: no removable media types] from marking as long as the media remain within [Assignment: organization-defined controlled areas]. MP-3(b) Additional FedRAMP Requirements and Guidance: Guidance: Second parameter in MP-3(b)-2 is not applicable. MP-3 Control Summary Information Responsible Role: Parameter MP-3(b)-1: Parameter MP-3(b)-2: Not applicable Implementation Status (check all that apply): Implemented Partially implemented Planned
MP-2 Control Summary Information Responsible Role: Parameter MP-2-1: Parameter MP-2-2: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , MP-2 What is the solution and how is it implemented? MP-3 Media Labeling (M) (H) The organization: Marks information system media indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information; and Exempts [FedRAMP Assignment: no removable media types] from marking as long as the media remain within [Assignment: organization-defined controlled areas]. MP-3(b) Additional FedRAMP Requirements and Guidance: Guidance: Second parameter in MP-3(b)-2 is not applicable. MP-3 Control Summary Information Responsible Role: Parameter MP-3(b)-1: Parameter MP-3(b)-2: Not applicable Implementation Status (check all that apply): Implemented Partially implemented Planned
FedRAMP-SSP-Moderate-2016-10-27-v03-01.docx