MP.2.120 Limit access to CUI on system media to authorized users.

CMMC Practice MP.2.120: Limit access to CUI on system media to authorized users.

Links to Publicly Available Resources

CMMC CLARIFICATION (Ref CMMC – Appendix B)

Limit physical access to CUI to people permitted to access CUI. Use locked or controlled storage areas and limit access to only those allowed to access CUI. Keep track of who accesses physical CUI in some sort of record.