+MP-06(01) Review, Approve, Track, Document, and Verify
|
MP-06(01) Review, Approve, Track, Document, and Verify
Control
Review, approve, track, document, and verify media sanitization and disposal actions.
Discussion
Organizations review and approve media to be sanitized to ensure compliance with records retention policies. Tracking and documenting actions include listing personnel who reviewed and approved sanitization and disposal actions, types of media sanitized, files stored on the media, sanitization methods used, date and time of the sanitization actions, personnel who performed the sanitization, verification actions taken and personnel who performed the verification, and the disposal actions taken. Organizations verify that the sanitization of the media was effective prior to disposal.
Assessment Objective
- media sanitization and disposal actions are reviewed;
- media sanitization and disposal actions are approved;
- media sanitization and disposal actions are tracked;
- media sanitization and disposal actions are documented;
- media sanitization and disposal actions are verified.
Assessment Method
Examine
System media protection policy
procedures addressing media sanitization and disposal
records retention and disposition policy
records retention and disposition procedures
media sanitization and disposal records
review records for media sanitization and disposal actions
approvals for media sanitization and disposal actions
tracking records
verification records
system audit records
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel with system media sanitization and disposal responsibilities
organizational personnel with records retention and disposition responsibilities
organizational personnel with information security and privacy responsibilities
system/network administrators
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|