3.8.6
3.8.6
Implement cryptographic mechanisms to protect the confidentiality of CUI stored on digital media during transport unless otherwise protected by alternative physical safeguards.
-
6.4.2.1 Organizations using portable media shall mandate the sole use of organization-owned secure portable media.
6.4.3.1 Organizations using portable media shall:
a. Have strong asset controls for these devices;
b. Require the use of encryption on all of these devices; and
c. Have processes for the sanitization or destruction of portable media prior to disposal.