u/Dave_From_VA

We've got a customer undergoing a CMMC assessment this year. They manufacture metal parts for the DoD.

Each batch being manufactured has a packet of information that stays with it from the raw material phase till shipping.

The Traveler contains multiple types of documents, including design specs and other elements that are CUI (and ITAR).

Under CMMC the Travelers should be locked at night or when not in use. Our customer may automate Travelers, but that is a year out.

Anybody have experience on this? Got an examples of how to handle it successfully?