NIST 800-171 · Media Protection
Requirement 3.8.5
- SPRS weight
- SPRS weight: 1
- POA&M eligibility
- POA&M-eligible
- Assessment objectives
- 2 assessment objectives
Official requirement text
Control access to media containing CUI and maintain accountability for media during transport outside of controlled areas.
Assessment objectives
Assessors don’t evaluate the requirement as one sentence; they walk these objectives one by one. Each must be met for the requirement to score.
- 3.8.5[a]access to media containing CUI is controlled.
- 3.8.5[b]accountability for media containing CUI is maintained during transport outside of controlled areas.
Inside Valontir, this requirement carries a full plain-English guide: what it asks in normal words, what good looks like in a small shop, the evidence an assessor accepts, the common gaps that cost points, and a plain reading of every assessment objective shown above. See it in a demo.