• Determination Statement

    Media containing diagnostic and test programs are checked for malicious code before being used in organizational systems that process, store, or transmit CUI.

  • Requirement

    Check media containing diagnostic and test programs for malicious code before the media are used in organizational systems.

  • Requirement Discussion

    If, upon inspection of media containing maintenance diagnostic and test programs, organizations determine that the media contain malicious code, the incident is handled consistent with incident handling policies and procedures.

More Info

  • Family

  • DoD Scoring Methodology Points


  • Related NIST 800-171 ID

  • Related CMMC ID

  • Related NIST 800-53 ID


  • Reference Documents

    • N/A

NIST 800-171A Assessment Guidance

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!