Obligation
Marking/handling
9 items across the GovConCyber reference layer carry this topic.
Requirements
- Protect System Media Containing CUI
- Limit Access to CUI on Media
- Sanitize or Destroy Media Before Disposal
- Mark Media with CUI Markings
- Account for Media During Transport
- Encrypt CUI on Media in Transport
- Control Use of Removable Media
- Prohibit Media with No Identifiable Owner
- Protect Confidentiality of Backups