Mapped to NIST 800-171 Requirement: 3.10.11
CMMC Assessment Objective: PE.L2-3.10.11
What This Control Means
Any time CUI is accessed or stored outside of your main facility, you must:
• Safeguard it physically and digitally
• Limit exposure to unauthorized individuals
• Prevent loss, theft, or accidental disclosure
This applies to:
• Remote employees handling CUI from home
• Field offices or temporary job sites
• Third-party service providers working off-site with access to CUI
Why It Matters
Remote work environments pose increased risks:
• Devices can be lost or stolen
• Physical protections are often minimal or nonexistent
• Family members or visitors may inadvertently access CUI
• Remote users may print or store data insecurely
This control ensures CUI stays protected—even when work leaves the office.
How to Implement It
1. Create a Remote Work Policy for CUI
• Define which roles may access CUI remotely
• Require secure workspace conditions (e.g., no public spaces)
2. Enforce Physical Safeguards
• Require:
◦ Locked doors or home office spaces
◦ Cable locks or secure storage for laptops/devices
◦ Prohibition of post-it notes or printed passwords
◦ No printing of CUI unless authorized
3. Control Device Usage
• Provide only company-issued devices
• Require disk encryption and endpoint protection
• Block use of personal USBs or cloud storage apps
4. Document Requirements in Security Plans
• Include alternate site procedures in:
◦ System Security Plan (SSP)
◦ Remote Work Policy
◦ Data Handling Guidelines
5. Train Users
• Provide security awareness training focused on remote risks
• Reinforce CUI handling expectations outside the office
Evidence the Assessor Will Look For
• Policies that define CUI handling at alternate or remote sites
• Employee acknowledgment or training logs
• Security checklists for remote users (e.g., self-inspection forms)
• Examples of device control enforcement and secure storage
• Incident response procedures that include remote device loss or breach
Common Gaps
• No physical safeguards for remote CUI use
• Home offices left unsecured or shared with family members
• Remote devices used for both personal and business functions
• Lack of guidance or enforcement for off-site CUI handling
How Cuick Trac Helps
Cuick Trac supports this requirement by:
• Enforcing remote CUI access policies and safeguards
• Providing secure enclave access for remote users
• Tracking remote device configurations and encryption status
• Offering self-inspection forms and policy acknowledgment workflows
• Ensuring remote CUI handling is secure, compliant, and auditable
With Cuick Trac, CUI stays protected—wherever your people are.
Final CTA
CUI doesn’t stop at your front door—and neither should your protection.
Schedule a Cuick Trac demo to safeguard CUI at every worksite, from HQ to home office.