NIST SP 800-171 & CMMC 2.0 Media Protection
Protect the confidentiality and integrity of digital media (e.g. hard drives) and non-digital media (e.g. paper).
-
3.8.1
Protect (i.e., physically control and securely store) system media containing Controlled Unclassified Information, both paper and digital.
-
3.8.2
Limit access to “Controlled Unclassified Information” (CUI) on system media to authorized users.
-
3.8.3
Sanitize or destroy information system media containing controlled unclassified information before disposal or release for reuse.
-
3.8.4
Mark media with necessary “Controlled Unclassified Information” (CUI) markings and distribution limitations.
-
3.8.5
Control access to media containing “Controlled Unclassified Information” (CUI) and maintain accountability for media during transport outside of controlled areas.
-
3.8.6
Implement cryptographic mechanisms to protect the confidentiality of “Controlled Unclassified Information” (CUI) stored on digital media during transport unless otherwise protected by alternative physical safeguards.
-
3.8.7
Control the use of removable media on system components.
-
3.8.8
Prohibit the use of portable storage devices when such devices have no identifiable owner.
-
3.8.9
Protect the confidentiality of backup “Controlled Unclassified Information” (CUI) at storage locations.
Need help putting this into practice? See our NIST SP 800-171 & CMMC compliance services or read our NIST SP 800-171 & CMMC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo