+SR-12 Component Disposal

SR-12 Component Disposal

Control

Dispose of [Assignement: data, documentation, tools, or system components] using the following techniques and methods: [Assignement: techniques and methods].

Discussion

Data, documentation, tools, or system components can be disposed of at any time during the system development life cycle (not only in the disposal or retirement phase of the life cycle). For example, disposal can occur during research and development, design, prototyping, or operations/maintenance and include methods such as disk cleaning, removal of cryptographic keys, partial reuse of components. Opportunities for compromise during disposal affect physical and logical data, including system documentation in paper-based or digital files; shipping and delivery documentation; memory sticks with software code; or complete routers or servers that include permanent media, which contain sensitive or proprietary information. Additionally, proper disposal of system components helps to prevent such components from entering the gray market.

Assessment Objective

[Assignement: data, documentation, tools, or system components] are disposed of using [Assignement: techniques and methods].

Assessment Method

Examine

Supply chain risk management policy and procedures supply chain risk management plan disposal procedures addressing supply chain protection media disposal policy media protection policy disposal records for system components documentation of the system components identified for disposal documentation of the disposal techniques and methods employed for system components system security plan other relevant documents or records

Interview

Organizational personnel with system component disposal responsibilities organizational personnel with information security responsibilities organizational personnel with supply chain protection responsibilities

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by SR-12 Component Disposal – Assessment Procedure
is blocked by Secure Disposal, Destruction or Re-Use of Equipment