CMMC Domain MP Media Protection
Safeguard data stored on removable media, such as a USB drive, or even on paper.
- Limit access to CUI on system media to authorized users.
- Mark media with necessary CUI markings and distribution limitations.
- Control access to media containing CUI and maintain accountability for media during transport outside of controlled areas.
- Protect the confidentiality of backup CUI at storage locations.
- Implement cryptographic mechanisms to protect the confidentiality of CUI stored on digital media during transport unless otherwise protected by alternative physical safeguards.
- Control the use of removable media on system components.
- Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse.
- Protect (i.e., physically control and securely store) system media containing CUI, both paper and digital.
- Prohibit the use of portable storage devices when such devices have no identifiable owner.