Media Protection (MP) templates
Templates for the Media Protection (MP) family of controls in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Revision 5, with the family policy and procedure first.
- Media Protection PolicyPOL-MP
In this policy, the CISO sets the Organization's requirements for media protection in every information system that the Organization operates or that others operate for it. The CISO issues the policy under these authorities:
- Media Protection ProcedurePROC-MP
The people named in this procedure use it to carry out the MP control family policy (POL-MP). It covers every control in the media protection family. The steps, the people responsible, and the evidence below show how the Organization meets those National Institute of Standards and Technology (NIST) SP 800-53 Rev.
- Controlled Unclassified Information (CUI) PolicyPOL-CUI-001
- CUI Decontrol and Destruction ProcedurePROC-CUI-003
Use this procedure to decontrol CUI, to release formerly controlled information, to destroy CUI, and to transfer CUI records to the National Archives and Records Administration (NARA). It covers CUI the Organization designated and CUI it holds from others.
- CUI Marking ProcedurePROC-CUI-001
Use this procedure to designate information as CUI, mark it, re-mark legacy documents, and fix markings that are wrong or missing. It covers every document, email, file, system screen, and container that holds CUI the Organization designates.
- CUI Safeguarding and Dissemination ProcedurePROC-CUI-002
Use this procedure to store, send, copy, and share CUI, and to set up the systems and agreements that hold it. It covers CUI in paper and electronic form, inside and outside the Organization's facilities.
- CUI SAO and Program Manager Designation TemplatesTMPL-CUI-001
This memorandum designates the Senior Agency Official for Controlled Unclassified Information (CUI SAO) for the Organization. The Agency Head makes this designation under Executive Order 13556, 32 CFR Part 2002, and ISOO Notice 2026-07.
- CUI Waiver Memorandum TemplateTMPL-CUI-002
This memorandum grants a waiver of CUI requirements under 32 CFR 2002.38 and ISOO Notice 2026-08. It names the CUI the waiver covers, the reason for it, the protections that replace the waived requirements, and when it ends.