CMMC Practice - MP.1.118

Sanitize or destroy information system media containing Federal Contract Information or controlled unclassified information before disposal or release for reuse.

CMMC Practice - MP.2.119

Protect (i.e., physically control and securely store) system media containing Federal Contract Information, both paper and digital.

CMMC Practice - MP.2.120

Limit access to “Controlled Unclassified Information” (CUI) on system media to authorized users.

CMMC Practice - MP.2.121

Control the use of removable media on system components.

CMMC Practice - MP.3.122

Mark media with necessary “Controlled Unclassified Information” (CUI) markings and distribution limitations.

CMMC Practice - MP.3.123

Prohibit the use of portable storage devices when such devices have no identifiable owner.

CMMC Practice - MP.3.124

Control access to media containing “Controlled Unclassified Information” (CUI) and maintain accountability for media during transport outside of controlled areas.

CMMC Practice - MP.3.125

Implement cryptographic mechanisms to protect the confidentiality of “Controlled Unclassified Information” (CUI) stored on digital media during transport unless otherwise protected by alternative physical safeguards.