CMMC Domain MP Media Protection
Safeguard data stored on removable media, such as a USB drive, or even on paper.
- MP.L2-3.8.5
- Control access to media containing CUI and maintain accountability for media during transport outside of controlled areas.
- MP.L2-3.8.9
- Protect the confidentiality of backup CUI at storage locations.
- MP.L2-3.8.2
- Limit access to CUI on system media to authorized users.
- MP.L2-3.8.4
- Mark media with necessary CUI markings and distribution limitations.
- MP.L2-3.8.6
- Implement cryptographic mechanisms to protect the confidentiality of CUI stored on digital media during transport unless otherwise protected by alternative physical safeguards.
- MP.L2-3.8.7
- Control the use of removable media on system components.
- MP.L1-3.8.3
- Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse.
- MP.L2-3.8.1
- Protect (i.e., physically control and securely store) system media containing CUI, both paper and digital.
- MP.L2-3.8.8
- Prohibit the use of portable storage devices when such devices have no identifiable owner.