+MP-06(03) Nondestructive Techniques
|
MP-06(03) Nondestructive Techniques
Control
Apply nondestructive sanitization techniques to portable storage devices prior to connecting such devices to the system under the following circumstances: [Assignement: circumstances].
Discussion
Portable storage devices include external or removable hard disk drives (e.g., solid state, magnetic), optical discs, magnetic or optical tapes, flash memory devices, flash memory cards, and other external or removable disks. Portable storage devices can be obtained from untrustworthy sources and contain malicious code that can be inserted into or transferred to organizational systems through USB ports or other entry portals. While scanning storage devices is recommended, sanitization provides additional assurance that such devices are free of malicious code. Organizations consider nondestructive sanitization of portable storage devices when the devices are purchased from manufacturers or vendors prior to initial use or when organizations cannot maintain a positive chain of custody for the devices.
Assessment Objective
non-destructive sanitization techniques are applied to portable storage devices prior to connecting such devices to the system under [Assignement: circumstances].
Assessment Method
Examine
System media protection policy
procedures addressing media sanitization and disposal
information on portable storage devices for the system
list of circumstances requiring sanitization of portable storage devices
media sanitization records
audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with system media sanitization responsibilities
organizational personnel with information security responsibilities
1. Prezentare generală
1.1 Referințe
1.2 Cerințe identificate
1.3 Reglementări asociate
2. Cerințe identificate
3. Reglementări asociate
Reglementări
| Sursă |
Reglementare |
Tichete legate
|