CMMC 2.0 • LEVEL 2 • MEDIA PROTECTION

MP.L2-3.8.7 — Media Use

Restrict or prohibit the use of organization-approved and asset-tagged encrypted USB storage devices only; all personal or unapproved portable storage is prohibitedCMMC/STIG. Prohibit the use of removable system media without an identifiable owner.

NIST 800-171 Mapping

NIST 800-53 Controls

MP-7

Assessment Objectives

  • the use of the following types of system media is restricted or prohibited: organization-approved and asset-tagged encrypted USB storage devices only; all personal or unapproved portable storage is prohibitedCMMC/STIG.
  • the use of removable system media without an identifiable owner is prohibited.

Practitioner Notes

Practitioner commentary coming soon.

Related CMMC 2.0 Practices

MP.L2-3.8.1 Media Storage MP.L2-3.8.2 Media Access MP.L1-3.8.3 Media Sanitization MP.L2-3.8.4 Media Marking