03.08.02: Media Access
Control Family:
Threats Addressed:
Previous Version:
- NIST Special Publication 800-171 Revision 2:
- 3.8.2: Limit access to CUI on system media to authorized users
Requirements
- Restrict access to CUI on system media to authorized personnel or roles.
Discussion
System media include digital and non-digital media. Access to CUI on system media can be restricted by physically controlling such media. This includes conducting inventories, ensuring that procedures are in place to allow individuals to check out and return media to the media library, and maintaining accountability for stored media. For digital media, access to CUI can be restricted by using cryptographic means. Encrypting data in storage or at rest is addressed in 03.13.08.