{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"physical","domain":"Data Protection & Privacy","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-DATA-10","description":"Store physical media holding sensitive or personal data in secured, access-controlled locations. Protect media during transport outside controlled areas using authorized personnel or couriers, accountability tracking, and encryption or locked containers. Sanitize media commensurate with its highest recorded classification before downgrading, reuse, or release, and maintain storage, transfer, and sanitization records.","details":{"control_category":"physical","control_type":"preventive","domain":"Data Protection & Privacy","guidance":[],"members":[{"control_id":"MP-4","coverage":"full","framework":"nist-800-53","relationship":"superset_of"},{"control_id":"MP-5","coverage":"full","framework":"nist-800-53","relationship":"superset_of"},{"control_id":"MP-8","coverage":"full","framework":"nist-800-53","relationship":"superset_of"}],"statement":"Store physical media holding sensitive or personal data in secured, access-controlled locations. Protect media during transport outside controlled areas using authorized personnel or couriers, accountability tracking, and encryption or locked containers. Sanitize media commensurate with its highest recorded classification before downgrading, reuse, or release, and maintain storage, transfer, and sanitization records.","title":"Protect physical media containing sensitive data","unified_id":"UC-DATA-10"},"id":"uc:UC-DATA-10","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-DATA-10","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"UC-DATA-10 — Protect physical media containing sensitive data","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:220b5357db87b7b0a6912103add757a15531d388cee3f00ea90147bb3005e4f0","properties":{"rationale":"Sanitizing media to its highest classification before downgrade/reuse/release directly prevents residual-data exposure on re-used media.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-data-10-e7ad28aa.json","sourceId":"uc:UC-DATA-10","targetDetailPath":"/data/v1/records/risk-data-residual-media-disposal-92de3d1d.json","targetId":"risk:data-residual-media-disposal","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4afa1531454706f610d7e9083d0f3dda8bc8bb739cc47f20f5f054c7988610dd","properties":{"rationale":"Storing media in secured, access-controlled locations and protecting it in transit directly counters theft of media, printouts, and devices.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-data-10-e7ad28aa.json","sourceId":"uc:UC-DATA-10","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9002c44b3517edcdbaacdd5d88e5adcb0ed742763a4a38055e2fbb5ff4fe4d08","properties":{"control_id":"MP-8","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-data-10-e7ad28aa.json","sourceId":"uc:UC-DATA-10","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-mp-8-e5fb8e17.json","targetId":"ctrl:nist-800-53:MP-8","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a32353f2867dfd51f6f075d30ff40680a5957c5ccdad6f1adf9cca342b2d9f6f","properties":{},"sourceDetailPath":"/data/v1/records/wf-c21-3ea9108a.json","sourceId":"wf:C21","targetDetailPath":"/data/v1/records/uc-uc-data-10-e7ad28aa.json","targetId":"uc:UC-DATA-10","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c3b23f89e8a5f76a5f83a6ec59e5266ec9491ab7d051b725c50e9ce4f3b2c8c6","properties":{"control_id":"MP-5","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-data-10-e7ad28aa.json","sourceId":"uc:UC-DATA-10","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-mp-5-192d8c47.json","targetId":"ctrl:nist-800-53:MP-5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:eaaf90f695a0c35c7fd66432a270f3bc31c8193d45b0361055f1f7f2d7681ebe","properties":{"control_id":"MP-4","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-data-10-e7ad28aa.json","sourceId":"uc:UC-DATA-10","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-mp-4-93a3f75c.json","targetId":"ctrl:nist-800-53:MP-4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f0a001848fbb08cf57cad5f88ce477ea577386aa9cb67456fd5c04429cb6872f","properties":{"rationale":"Securing and sanitizing physical media reduces unauthorized disclosure of data carried on that media.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-data-10-e7ad28aa.json","sourceId":"uc:UC-DATA-10","targetDetailPath":"/data/v1/records/risk-data-breach-unauthorized-disclosure-3b1c296c.json","targetId":"risk:data-breach-unauthorized-disclosure","type":"mitigates"}],"schemaVersion":1}