Protect the integrity of information prior to storage on read-only media and control the media after such information has been recorded onto the media.

Controls prevent the substitution of media into systems or the reprogramming of programmable read-only media prior to installation into the systems. Integrity protection controls include a combination of prevention, detection, and response.