+MP-06(08) Remote Purging or Wiping of Information
|
MP-06(08) Remote Purging or Wiping of Information
Control
Provide the capability to purge or wipe information from [Assignement: systems or system components] [Selection: remotely; under {{ insert: param, mp-06.08_odp.03 }} ].
Discussion
Remote purging or wiping of information protects information on organizational systems and system components if systems or components are obtained by unauthorized individuals. Remote purge or wipe commands require strong authentication to help mitigate the risk of unauthorized individuals purging or wiping the system, component, or device. The purge or wipe function can be implemented in a variety of ways, including by overwriting data or information multiple times or by destroying the key necessary to decrypt encrypted data.
Assessment Objective
the capability to purge or wipe information from [Assignement: systems or system components] [Selection: remotely; under {{ insert: param, mp-06.08_odp.03 }} ] is provided.
Assessment Method
Examine
System media protection policy
procedures addressing media sanitization and disposal
system design documentation
system configuration settings and associated documentation
authorization records
media sanitization records
audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with system media sanitization responsibilities
organizational personnel with information security responsibilities
system/network administrators
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|