Assessment Objective
Determine if:
- dual authorization for the sanitization of [Assignment: system media] is enforced.
Assessment Methods
Examine
- System media protection policy
- procedures addressing media sanitization and disposal
- dual authorization policy and procedures
- list of system media requiring dual authorization for sanitization
- authorization records
- media sanitization records
- audit records
- system security plan
- other relevant documents or records
Interview
- Personnel with system media sanitization responsibilities
- personnel with information security responsibilities
- system/network administrators
Test
- Processes requiring dual authorization for media sanitization
- mechanisms supporting and/or implementing media sanitization
- mechanisms supporting and/or implementing dual authorization
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | 03.08.01E Dual Authorization for Media Sanitization |