Assessment Objective
Determine if:
- SR-12 [Assignment: data, documentation, tools, or system components] are disposed of using [Assignment: techniques and methods].
Assessment Methods
Examine
- Supply chain risk management policy and procedures
- supply chain risk management plan
- disposal procedures addressing supply chain protection
- media disposal policy
- media protection policy
- disposal records for system components
- documentation of the system components identified for disposal
- documentation of the disposal techniques and methods employed for system components
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system component disposal responsibilities
- organizational personnel with information security responsibilities
- organizational personnel with supply chain protection responsibilities
Test
- Organizational techniques and methods for system component disposal
- mechanisms supporting and/or implementing system component disposal
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | SR-12 [L] Component Disposal |