The use of removable storage media remains a source of data breaches. The CMMC requires control of the use of removable media on system components. As a CCA, you can use different assessment methods to determine whether an OSC has met this requirement. What is the best assessment method to ascertain that MP.L2-3.8.7[a] has been met?
Submit