Control access to media containing “Controlled Unclassified Information” (CUI) and maintain accountability for media during transport outside of controlled areas.

You need to safeguard digital and non-digital media containing CUI when it is transported outside of your secure facility. Safeguards used to protect media during transport include locked containers and encryption. Digital and non-digital media containing CUI may be transported outside of your facility via a mail/shipping service. To maintain accountability when shipping CUI you should receive a tracking number.

If you are transporting digital storage devices (e.g., hard drives) containing CUI outside of your facilities they need to be encrypted. If you are transporting paperwork containing CUI outside of your facilities it should be in a locked container. Maintain accountability for CUI transported outside of your organization by documenting who is authorized to transport it. This can include company employees and postal services. If you need to ship CUI in the mail make sure that you receive a tracking number and specify the intended recipient.