Family: Media Protection
Framework: NIST SP 800-171 Rev 3
Applicability: Systems processing, storing, or transmitting CUI
03.08.08
What to Check
Verify SP_800_171_03.08.08 03.08.08 is implemented for CUI systems
Review SSP documentation for SP_800_171_03.08.08
Validate CMMC Level 2 assessment objective for SP_800_171_03.08.08
Confirm POA&M addresses any gaps for SP_800_171_03.08.08
How to Test
Step 1: Review System Security Plan
Examine the SSP for SP_800_171_03.08.08 implementation description and responsible parties.
Step 2: Assess Implementation
# Verify security controls protecting CUI
# Check access controls, encryption, monitoring as applicable
# For Linux systems:
ls -la /etc/security/ 2>/dev/null
grep -r "CUI\|controlled" /etc/security/ 2>/dev/null
# For cloud:
# Use cloud-audit-mcp tools to assess posture
Step 3: CMMC Assessment Validation
Verify this requirement passes CMMC Level 2 assessment methodology per SP 800-171A Rev 3.
Tools
Tool
Purpose
Usage
cloud-audit-mcp
Assess cloud CUI environment
cloud_audit_* tools
Manual Review
SSP and POA&M review
Documentation analysis
Remediation Guide
Requirement Statement
Implement 03.08.08 per NIST SP 800-171 Rev 3.
Supplemental Guidance
Refer to SP 800-171A Rev 3 for detailed assessment procedures.
Run npx skillmds@latest add cyberstrikeus/sp-800-171-03-08-08-030808 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
03.08.08 It is listed under Coding & Dev Tools on SkillMD.
SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.
cyberstrikeus