Label with the maximum classification, date of creation, point of contact, and Change Management (CM) Control Number
Properly identify and disclose removable media with local Configuration/Change Management (CM) procedures
Include classification markings and handling caveats
Follow NSA/CSS Policy 6-22 for the use of ISM that are considered to be removable media[5].