Limit access to “Controlled Unclassified Information” (CUI) on system media to authorized users.

By only allowing authorized persons access to “Controlled Unclassified Information” (CUI) you can reduce the risk of it being exposed to unauthorized persons. Creating an inventory for “Controlled Unclassified Information” (CUI), securely storing it, and document who has possession of it all support this practice.

Create an inventory of media (e.g., external drives) containing “Controlled Unclassified Information” (CUI). Store them in a locked container such as a file cabinet. Only provide access to the container to authorized persons. Requiring them to sign media in and out when they handle it.