Sanitize or destroy information system media containing Federal Contract Information or controlled unclassified information before disposal or release for reuse.

Protect (i.e., physically control and securely store) system media containing Federal Contract Information, both paper and digital.

Limit access to “Controlled Unclassified Information” (CUI) on system media to authorized users.

Control the use of removable media on system components.

Mark media with necessary “Controlled Unclassified Information” (CUI) markings and distribution limitations.

Prohibit the use of portable storage devices when such devices have no identifiable owner.

Control access to media containing “Controlled Unclassified Information” (CUI) and maintain accountability for media during transport outside of controlled areas.

Implement cryptographic mechanisms to protect the confidentiality of “Controlled Unclassified Information” (CUI) stored on digital media during transport unless otherwise protected by alternative physical safeguards.