id: "MP-06(01)" title: "Review, Approve, Track, Document, and Verify" family: "MP" family_name: "Media Protection" sort_id: "mp-06.01" priority: "P2" implementation_level: "organization" parent: "MP-06" enhancement: True
Statement
Review, approve, track, document, and verify media sanitization and disposal actions.
Guidance
Organizations review and approve media to be sanitized to ensure compliance with records retention policies. Tracking and documenting actions include listing personnel who reviewed and approved sanitization and disposal actions, types of media sanitized, files stored on the media, sanitization methods used, date and time of the sanitization actions, personnel who performed the sanitization, verification actions taken and personnel who performed the verification, and the disposal actions taken. Organizations verify that the sanitization of the media was effective prior to disposal.
Assessment Objective: media sanitization and disposal actions are reviewed;
Assessment Objective: media sanitization and disposal actions are approved;
Assessment Objective: media sanitization and disposal actions are tracked;
Assessment Objective: media sanitization and disposal actions are documented;
Assessment Objective: media sanitization and disposal actions are verified.
System media protection policy
procedures addressing media sanitization and disposal
records retention and disposition policy
records retention and disposition procedures
media sanitization and disposal records
review records for media sanitization and disposal actions
approvals for media sanitization and disposal actions
tracking records
verification records
system audit records
system security plan
privacy plan
other relevant documents or records
Organizational personnel with system media sanitization and disposal responsibilities
organizational personnel with records retention and disposition responsibilities
organizational personnel with information security and privacy responsibilities
system/network administrators
Organizational processes for media sanitization
mechanisms supporting and/or implementing media sanitization
mechanisms supporting and/or implementing verification of media sanitization