CMMC Practice MP.2.120: Limit access to CUI on system media to authorized users.
CMMC CLARIFICATION (Ref CMMC – Appendix B)
Limit physical access to CUI to people permitted to access CUI. Use locked or controlled storage areas and limit access to only those allowed to access CUI. Keep track of who accesses physical CUI in some sort of record.