+MP-07(02) Prohibit Use of Sanitization-resistant Media
|
MP-07(02) Prohibit Use of Sanitization-resistant Media
Control
Prohibit the use of sanitization-resistant media in organizational systems.
Discussion
Sanitization resistance refers to how resistant media are to non-destructive sanitization techniques with respect to the capability to purge information from media. Certain types of media do not support sanitization commands, or if supported, the interfaces are not supported in a standardized way across these devices. Sanitization-resistant media includes compact flash, embedded flash on boards and devices, solid state drives, and USB removable media.
Assessment Objective
- sanitization-resistant media is identified;
- the use of sanitization-resistant media in organizational systems is prohibited.
Assessment Method
Examine
System media protection policy
system use policy
procedures addressing media usage restrictions
rules of behavior
system configuration settings and associated documentation
system security plan
other relevant documents or records
Interview
Organizational personnel with system media use responsibilities
organizational personnel with information security responsibilities
system/network administrators
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|