NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements 3.2: Establish and Maintain a Data Inventory

Establish and maintain a data inventory based on the enterprise data management process. Inventory sensitive data at minimum. Review and update annually.

Other controls in Awareness, Training, and Personnel

3.2.1 Account data storage is kept to a minimum through implementation of data retention and disposal policies, procedures, and processes that include at least the following: • Coverage for all locations of stored account data.
3.9 Encrypt Data on Removable Media
3.9.1 Personnel Screening Assessment

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements controls