03.08.04: Media Marking
Control Family:
Previous Version:
- NIST Special Publication 800-171 Revision 2:
- 3.8.4: Mark media with necessary CUI markings and distribution limitations
Requirements
- Mark system media that contain CUI to indicate distribution limitations, handling caveats, and applicable CUI markings.
Discussion
System media include digital and non-digital media. Marking refers to the use or application of human-readable security attributes. Labeling refers to the use of security attributes for internal system data structures. Digital media include diskettes, magnetic tapes, external or removable solid state or magnetic drives, flash drives, compact discs, and digital versatile discs. Non-digital media include paper and microfilm. CUI is defined by NARA along with marking, safeguarding, and dissemination requirements for such information.