What this requirement asks
Enforce safeguarding measures for CUI at alternate work sites.
This is a CMMC Level 2 requirement in the Physical Protection family, drawn from NIST SP 800-171 Rev. 2. An assessor evaluates it objective by objective — every objective below must be supported by evidence, not just described in a policy.
Assessment objectives (2)
- 3.10.6[a] — safeguarding measures for CUI are defined for alternate work sites
- 3.10.6[b] — safeguarding measures for CUI are enforced for alternate work sites
What an assessor examines
Examine:
- Physical and environmental protection policy
- procedures addressing alternate work sites for personnel
- system security plan
- list of safeguards required for alternate work sites
- assessments of safeguards at alternate work sites
- other relevant documents or records
Interview:
- Personnel approving use of alternate work sites
- personnel using alternate work sites
- personnel assessing controls at alternate work sites
- personnel with information security responsibilities
Test:
- Organizational processes for security at alternate work sites
- mechanisms supporting alternate work sites
- safeguards employed at alternate work sites
- means of communications between personnel at alternate work sites and security personnel
Evidence that defends it
Telework/alternate site security requirements
Check your readiness
Score this requirement against your own environment with the Level 2 self-assessment checklist, or estimate your SPRS score with the free CMMC compliance tool. Self-reported answers are planning signals only — they do not establish a verified or assessor-accepted result.