Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.8.6

Encrypt CUI on Media in Transport

Official citation: 3.8.6

Class: core · Severity: high

Statement of the obligation — verify against source

3.8.6

What it means

Encrypt CUI stored on digital media while it's being transported, unless equivalent physical safeguards protect it. Cryptographic protection guards the information if the media is lost or stolen en route; use FIPS-validated cryptography.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.