Controls & assessment objectives

9 controls

• MP.L2-3.8.1MP · Media ProtectionLevel 2CMMC L2

  Media Protection

  Protect (i.e., physically control and securely store) system media containing CUI, both paper and digital.

  • 4objectives
  • 1examples
  • 0threads
• MP.L2-3.8.2MP · Media ProtectionLevel 2CMMC L2

  Media Access

  Limit access to CUI on system media to authorized users.

  • 1objectives
  • 1examples
  • 0threads
• MP.L2-3.8.3MP · Media ProtectionLevel 2CMMC L2

  Media Disposal [CUI Data]

  Sanitize or destroy system media containing CUI before disposal or release for reuse.

  • 2objectives
  • 1examples
  • 0threads
• MP.L2-3.8.4MP · Media ProtectionLevel 2CMMC L2

  Media Markings

  Mark media with necessary CUI markings and distribution limitations.

  • 2objectives
  • 1examples
  • 0threads
• MP.L2-3.8.5MP · Media ProtectionLevel 2CMMC L2

  Media Accountability

  Control access to media containing CUI and maintain accountability for media during transport outside of controlled areas.

  • 2objectives
  • 1examples
  • 0threads
• MP.L2-3.8.6MP · Media ProtectionLevel 2CMMC L2

  Portable Storage Encryption

  Implement cryptographic mechanisms to protect the confidentiality of CUI stored on digital media during transport unless otherwise protected by alternative physical safeguards.

  • 1objectives
  • 1examples
  • 0threads
• MP.L2-3.8.7MP · Media ProtectionLevel 2CMMC L2

  Removeable Media

  Control the use of removable media on system components.

  • 1objectives
  • 1examples
  • 0threads
• MP.L2-3.8.8MP · Media ProtectionLevel 2CMMC L2

  Shared Media

  Prohibit the use of portable storage devices when such devices have no identifiable owner.

  • 1objectives
  • 1examples
  • 0threads
• MP.L2-3.8.9MP · Media ProtectionLevel 2CMMC L2

  Protect Backups

  Protect the confidentiality of backup CUI at storage locations.

  • 1objectives
  • 1examples
  • 0threads