CMMC Level 2

Media Protection Controls

Controls for protecting information system media containing CUI, both paper and digital, and limiting access to CUI on system media to authorized users.

CMMC-RP Certified Team 9 Controls in Family 3.8 24+ Years Experience

About the Media Protection Family (MP)

Controls for protecting information system media containing CUI, both paper and digital, and limiting access to CUI on system media to authorized users. This family contains 9 security requirements that organizations must implement to achieve CMMC Level 2 certification and protect Controlled Unclassified Information (CUI). Petronella Technology Group's CMMC-RP certified team provides expert guidance on implementing every control in this family.

CMMC Level 2 - Media Protection Controls

All 9 Media Protection controls with CMMC-focused implementation guidance.

3.8.1Protect CUI on System Media→ 3.8.2Limit Access to CUI on System Media→ 3.8.3Sanitize or Destroy CUI Media Before Disposal→ 3.8.4Mark CUI Media with Distribution Markings→ 3.8.5Control Access to CUI Media and Maintain Accountability→ 3.8.6Implement Cryptographic Mechanisms for CUI on Portable Storage→ 3.8.7Control Removable Media Usage→ 3.8.8Prohibit Portable Storage When No Identifiable Owner→ 3.8.9Protect Backup CUI at Storage Locations→

NIST SP 800-171 - Media Protection Requirements

The same 9 controls with NIST 800-171-focused assessment preparation guidance.

3.8.1Protect CUI on System Media→ 3.8.2Limit Access to CUI on System Media→ 3.8.3Sanitize or Destroy CUI Media Before Disposal→ 3.8.4Mark CUI Media with Distribution Markings→ 3.8.5Control Access to CUI Media and Maintain Accountability→ 3.8.6Implement Cryptographic Mechanisms for CUI on Portable Storage→ 3.8.7Control Removable Media Usage→ 3.8.8Prohibit Portable Storage When No Identifiable Owner→ 3.8.9Protect Backup CUI at Storage Locations→
All CMMC Families
AC: Access Control AT: Awareness and Training AU: Audit and Accountability CM: Configuration Management IA: Identification and Authentication IR: Incident Response MA: Maintenance MP: Media Protection PS: Personnel Security PE: Physical Protection RA: Risk Assessment CA: Security Assessment SC: System and Communications Protection SI: System and Information Integrity

Need Help With Media Protection Controls?

Our CMMC-RP certified team has helped 2,500+ organizations implement these controls and pass assessments.

Schedule a Compliance Assessment