03.08.03 Media Sanitization

Statement

Sanitize system media that contain CUI prior to disposal, release out of organizational control, or release for reuse.

Guidance

Media sanitization applies to digital and non-digital media that are subject to disposal or reuse, whether or not the media are considered removable. Examples include digital media in scanners, copiers, printers, notebook computers, mobile devices, workstations, network components, and non-digital media. The sanitization process removes CUI from media such that the information cannot be retrieved or reconstructed. Sanitization techniques (e.g., cryptographically erasing, clearing, purging, and destroying) prevent the disclosure of CUI to unauthorized individuals when such media are reused or released for disposal. NARA policies control the sanitization process for media that contain CUI and may require destruction when other methods cannot be applied to the media.

Assessment objective

system media that contain CUI are sanitized prior to disposal, release out of organizational control, or release for reuse.

Assessment method

• media protection policy and procedures procedures for media sanitization and disposal applicable standards and policies that address media sanitization policy system audit records media sanitization records system design documentation system configuration settings records retention and disposition policy records retention and disposition procedures system security plan other relevant documents or records

Assessment method

• personnel with media sanitization responsibilities personnel with records retention and disposition responsibilities personnel with information security responsibilities system administrators

Assessment method

• processes for media sanitization mechanisms for supporting or implementing media sanitization

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

3. Související regulace

Propojené úkoly

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final