Domain 7 · Objective reference 7.5 · Chapter 47 of 62
Protect operational resources and media
About 5 minutes · Current ISC2 outline effective 15 April 2024; the announced 15 April 2027 replacement requires separate mapping
Session only. Enable saving or download a backup from this course’s hub.
Completion is self-reported and does not certify understanding.
See it · Try it · Recall it
Picture the topic
Remember this: Media needs protection from creation to disposal.
Explore the anchors
Know media owners contents and locations.
Concept matching activity
Match this task or description to its concept:
Restrict transport storage and access.
Choose a concept before checking the explanation.
A quick way to study this topic
- Hide the explanation and redraw these three anchors from memory.
- Explain the difference between the anchors in your own words.
- Apply the distinction to the worked example below. Check the full lesson for assumptions and exceptions.
- Recall it again tomorrow, then after a few days. A memory hint is a retrieval cue, not a replacement for understanding.
Original academy illustrations and fictional exercises. These are learning simulations, not a real virtual machine, network assessment or measure of job readiness. Activities reset when you leave or reload; they do not change quiz scores.
What this chapter explains
- Concepts and mechanisms
- Design, evidence and tradeoffs
Concepts and mechanisms
Media protection includes storage, transport, inventory, access, retention, sanitization and disposition. Data at rest and in transit have different exposure paths, and a protected primary system can still leak through a backup or portable copy. Labels communicate handling needs but do not enforce them. Use suitable custody and verification for sensitive or evidential material.
Design, evidence and tradeoffs
Choose medium-specific sanitization and verify the result. Simple deletion may leave remanent data; encryption-based disposition requires trustworthy key handling. Approved reuse, destruction and retained legal requirements change the decision. Protect keys and recovery capability alongside the media. Supplier disposal evidence is relevant only to the assets, method and assurance actually covered.
Worked example
A retired storage device is matched to its approved disposition record, with verification of the medium-specific method used.
Check your understanding
Why should an encrypted backup still have physical and access controls?
Show explanation
Keys or authorized decryption paths can be exposed, and media loss can affect availability and retained evidence even where ciphertext remains protected.
Source and study boundary
Official syllabus source. The reference identifies the topic being taught. Explanations and examples are original academy material; a topic link does not establish independent approval or sufficient exam mastery.