CMMC 1.0 Practice - MP.1.118
Sanitize or destroy information system media containing Federal Contract Information or controlled unclassified information before disposal or release for reuse.
CMMC 1.0 Practice - MP.2.119
Protect (i.e., physically control and securely store) system media containing Federal Contract Information, both paper and digital.
CMMC 1.0 Practice - MP.2.120
Limit access to “Controlled Unclassified Information” (CUI) on system media to authorized users.
CMMC 1.0 Practice - MP.2.121
Control the use of removable media on system components.
CMMC 1.0 Practice - MP.3.122
Mark media with necessary “Controlled Unclassified Information” (CUI) markings and distribution limitations.
CMMC 1.0 Practice - MP.3.123
Prohibit the use of portable storage devices when such devices have no identifiable owner.
CMMC 1.0 Practice - MP.3.124
Control access to media containing “Controlled Unclassified Information” (CUI) and maintain accountability for media during transport outside of controlled areas.
CMMC 1.0 Practice - MP.3.125
Implement cryptographic mechanisms to protect the confidentiality of “Controlled Unclassified Information” (CUI) stored on digital media during transport unless otherwise protected by alternative physical safeguards.