---

id: "MP-06(07)" title: "Dual Authorization" family: "MP" family_name: "Media Protection" sort_id: "mp-06.07" priority: "P2" implementation_level: "organization" parent: "MP-06" enhancement: True

---

Statement

Enforce dual authorization for the sanitization of {{ insert: param, mp-06.07_odp }}.

Guidance

Organizations employ dual authorization to help ensure that system media sanitization cannot occur unless two technically qualified individuals conduct the designated task. Individuals who sanitize system media possess sufficient skills and expertise to determine if the proposed sanitization reflects applicable federal and organizational standards, policies, and procedures. Dual authorization also helps to ensure that sanitization occurs as intended, protecting against errors and false claims of having performed the sanitization actions. Dual authorization may also be known as two-person control. To reduce the risk of collusion, organizations consider rotating dual authorization duties to other individuals.

Assessment Objective

dual authorization for sanitization of {{ insert: param, mp-06.07_odp }} is enforced.

System media protection policy

procedures addressing media sanitization and disposal

dual authorization policy and procedures

list of system media requiring dual authorization for sanitization

authorization records

media sanitization records

audit records

system security plan

other relevant documents or records

Organizational personnel with system media sanitization responsibilities

organizational personnel with information security responsibilities

system/network administrators

Organizational processes requiring dual authorization for media sanitization

mechanisms supporting and/or implementing media sanitization

mechanisms supporting and/or implementing dual authorization