Assessment Objective
Determine if:
- MP-06(07) dual authorization for sanitization of [Assignment: system media] is enforced.
Assessment Methods
Examine
- System media protection policy
- procedures addressing media sanitization and disposal
- dual authorization policy and procedures
- list of system media requiring dual authorization for sanitization
- authorization records
- media sanitization records
- audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system media sanitization responsibilities
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Organizational processes requiring dual authorization for media sanitization
- mechanisms supporting and/or implementing media sanitization
- mechanisms supporting and/or implementing dual authorization
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | MP-06(07) Dual Authorization |