CMMC and NIST 800-171 require that confidential unclassified information (CUI) be closely tracked...in many manufacturing environments CNC machines are not network connected, and require the use of USB drives to get programs from the network onto the CNC controller. These will contain CUI and should be securely stored, and signed out and back in for tracking