BaselineWatch
130 requirements
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

NIST SP 800-171 Rev 3 (CUI; CMMC Level 2) OSCAL 1.1.0

130 requirements · published 2026-10-22
Changes in this version
All03.01 Access Control03.02 Awareness and Training03.03 Audit and Accountability03.04 Configuration Management03.05 Identification and Authentication03.06 Incident Response03.07 Maintenance03.08 Media Protection03.09 Personnel Security03.10 Physical Protection03.11 Risk Assessment03.12 Security Assessment and Monitoring03.13 System and Communications Protection03.14 System and Information Integrity03.15 Planning03.16 System and Services Acquisition03.17 Supply Chain Risk Management
RefTitleText
03.08.01 Media Storage Physically control and securely store system media that contain CUI.
03.08.02 Media Access Restrict access to CUI on system media to authorized personnel or roles.
03.08.03 Media Sanitization Sanitize system media that contain CUI prior to disposal, release out of organizational control, or release for reuse.
03.08.04 Media Marking Mark system media that contain CUI to indicate distribution limitations, handling caveats, and applicable CUI markings.
03.08.05 Media Transport a. Protect and control system media that contain CUI during transport outside of controlled areas. b. Maintain accountability of system media that contain CUI during transport outside of controlled areas. c. Document activities associated w
03.08.06 03.08.06 withdrawn
03.08.07 Media Use a. Restrict or prohibit the use of [Assignment: types of system media]. b. Prohibit the use of removable system media without an identifiable owner.
03.08.08 03.08.08 withdrawn
03.08.09 System Backup – Cryptographic Protection a. Protect the confidentiality of backup information. b. Implement cryptographic mechanisms to prevent the unauthorized disclosure of CUI at backup storage locations.

9 of 130.