Assessment Objective
Determine if:
- MP-06(01)[01] media sanitization and disposal actions are reviewed;
- MP-06(01)[02] media sanitization and disposal actions are approved;
- MP-06(01)[03] media sanitization and disposal actions are tracked;
- MP-06(01)[04] media sanitization and disposal actions are documented;
- MP-06(01)[05] media sanitization and disposal actions are verified.
Assessment Methods
Examine
- System media protection policy
- procedures addressing media sanitization and disposal
- records retention and disposition policy
- records retention and disposition procedures
- media sanitization and disposal records
- review records for media sanitization and disposal actions
- approvals for media sanitization and disposal actions
- tracking records
- verification records
- system audit records
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with system media sanitization and disposal responsibilities
- organizational personnel with records retention and disposition responsibilities
- organizational personnel with information security and privacy responsibilities
- system/network administrators
Test
- Organizational processes for media sanitization
- mechanisms supporting and/or implementing media sanitization
- mechanisms supporting and/or implementing verification of media sanitization
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | MP-06(01) [H] Review, Approve, Track, Document, and Verify |