MP.L2-3.8.7 Removable Media

CMMC Practice MP.L2-3.8.7 – Removable Media: Control the use of removable media on system components. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting Cybersecurity Maturity Model...

MP.L2-3.8.2 Media Access

CMMC Practice MP.L2-3.8.2 – Media Access: Limit access to CUI on system media to authorized users. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting Cybersecurity Maturity Model...

MP.L2-3.8.1 Media Protection

CMMC Practice MP.L2-3.8.1 – Media Protection: Protect (i.e., physically control and securely store) system media containing CUI, both paper and digital. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment...

MP.L1-3.8.3 Media Disposal

CMMC Practice MP.L1-3.8.3 – Media Disposal: Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse. Links to Publicly Available Resources BCWipe BCWipe is a data sanitization toolset. Carnegie...

PS.L2-3.9.2 Personnel Actions

CMMC Practice PS.L2-3.9.2 – Personnel Actions: Ensure that organizational systems containing CUI are protected during and after personnel actions such as terminations and transfers. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This...

PS.L2-3.9.1 Screen Individuals

CMMC Practice PS.L2-3.9.1 – Screen Individuals: Screen individuals prior to authorizing access to organizational systems containing CUI. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting...