03.08.04 —

What this control requires

Source: NIST SP 800-171 R3 §03.08.04 (official control text).

Why this matters

Media marking ensures that anyone handling physical or digital storage can immediately identify what contains Controlled Unclassified Information and handle it appropriately. Without clear labels, employees might leave unmarked USB drives on desks, toss printed CUI documents in regular recycling, or hand unencrypted media to unauthorized personnel. This control prevents data spills by making sensitivity visible at the physical object level—before someone clicks, inserts, or files the wrong thing. It's the first line of defense when information leaves the digital fortress and enters the physical world where access controls can't enforce policy.

What evidence assessors expect

Assessors typically look for: photo, PDF, screenshot, signed letter. FORCE coaches you through the exact implementation steps and captures each artifact in-platform.

Related controls