CMMC Domain MP Media Protection
Safeguard data stored on removable media, such as a USB drive, or even on paper.
- Media Markings: Mark media with necessary CUI markings and distribution limitations.
- Portable Storage Encryption: Implement cryptographic mechanisms to protect the confidentiality of CUI stored on digital media during transport unless otherwise protected by alternative physical safeguards.
- Media Disposal: Sanitize or destroy information system media containing FCI/CUI before disposal or release for reuse.
- Removeable Media: Control the use of removable media on system components.
- Protect Backups: Protect the confidentiality of backup CUI at storage locations.
- Media Protection: Protect (i.e., physically control and securely store) system media containing CUI, both paper and digital.
- Shared Media: Prohibit the use of portable storage devices when such devices have no identifiable owner.
- Media Access: Limit access to CUI on system media to authorized users.
- Media Accountability: Control access to media containing CUI and maintain accountability for media during transport outside of controlled areas.