NIST SP 800-171 REV. 3 Media Protection
Protect the confidentiality and integrity of digital media (e.g. hard drives) and non-digital media (e.g. paper).
-
03.08.01 Media Storage
Physically control and securely store system media that contain CUI.
-
03.08.02 Media Access
Restrict access to CUI on system media to authorized personnel or roles.
-
03.08.03 Media Sanitization
Sanitize system media that contain CUI prior to disposal, release out of organizational control, or release for reuse.
-
03.08.04 Media Marking
Mark system media that contain CUI to indicate distribution limitations, handling caveats, and applicable CUI markings.
-
03.08.05 Media Transport
Protect and control system media that contain CUI during transport outside of controlled areas.
-
03.08.07 Media Use
Restrict or prohibit the use of [Assignment: organization-defined types of system media].
-
03.08.09 System Backup – Cryptographic Protection
Protect the confidentiality of backup information.
Need help putting this into practice? See our NIST SP 800-171 & CMMC compliance services or read our NIST SP 800-171 & CMMC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo