+MP-06(07) Dual Authorization
|
MP-06(07) Dual Authorization
Control
Enforce dual authorization for the sanitization of [Assignement: system media].
Discussion
Organizations employ dual authorization to help ensure that system media sanitization cannot occur unless two technically qualified individuals conduct the designated task. Individuals who sanitize system media possess sufficient skills and expertise to determine if the proposed sanitization reflects applicable federal and organizational standards, policies, and procedures. Dual authorization also helps to ensure that sanitization occurs as intended, protecting against errors and false claims of having performed the sanitization actions. Dual authorization may also be known as two-person control. To reduce the risk of collusion, organizations consider rotating dual authorization duties to other individuals.
Assessment Objective
dual authorization for sanitization of [Assignement: system media] is enforced.
Assessment Method
Examine
System media protection policy
procedures addressing media sanitization and disposal
dual authorization policy and procedures
list of system media requiring dual authorization for sanitization
authorization records
media sanitization records
audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with system media sanitization responsibilities
organizational personnel with information security responsibilities
system/network administrators
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|