CMMC objective AC.L2-3.3.4[b]: CUI is disposed of or retained according to law and organizational policy. Content available in knowledge base.