// Level 3 · Controls

Media Protection

Protect CUI on system media, both digital and paper.

Protect (i.e., physically control and securely store) system media containing CUI.

Limit access to CUI on system media to authorized users.

Sanitize or destroy system media containing CUI before disposal or release for reuse.

Mark media with necessary CUI markings and distribution limitations.

Control access to media containing CUI and maintain accountability during transport.

Implement cryptographic mechanisms to protect the confidentiality of CUI on portable storage devices.

Control the use of removable media on system components.

Prohibit the use of portable storage devices when such devices have no identifiable owner.

Protect the confidentiality of backup CUI at storage locations.