Assessment Objective
Determine if:
- system media that contain CUI are sanitized prior to disposal, release out of organizational control, or release for reuse.
Assessment Methods
Examine
- media protection policy and procedures
- procedures for media sanitization and disposal
- applicable standards and policies that address media sanitization policy
- system audit records
- media sanitization records
- system design documentation
- system configuration settings
- records retention and disposition policy
- records retention and disposition procedures
- system security plan
- other relevant documents or records
Interview
- personnel with media sanitization responsibilities
- personnel with records retention and disposition responsibilities
- personnel with information security responsibilities
- system administrators
Test
- processes for media sanitization
- mechanisms for supporting or implementing media sanitization
Susietos užduotys
| Saito tipas | Užduotis |
|---|---|
| blocks | 03.08.03 Media Sanitization |