Protect system media in both digital and non-digital formats.
Media protection is about the physical and digital media that carry CUI: how they are protected, marked, controlled in transit, sanitised or destroyed, and how removable media and backups are handled. Marking and sanitisation are the requirements assessors probe first.
