id: "MP-06(08)" title: "Remote Purging or Wiping of Information" family: "MP" family_name: "Media Protection" sort_id: "mp-06.08" priority: "P2" implementation_level: "organization" parent: "MP-06" enhancement: True
Statement
Provide the capability to purge or wipe information from {{ insert: param, mp-06.08_odp.01 }} {{ insert: param, mp-06.08_odp.02 }}.
Guidance
Remote purging or wiping of information protects information on organizational systems and system components if systems or components are obtained by unauthorized individuals. Remote purge or wipe commands require strong authentication to help mitigate the risk of unauthorized individuals purging or wiping the system, component, or device. The purge or wipe function can be implemented in a variety of ways, including by overwriting data or information multiple times or by destroying the key necessary to decrypt encrypted data.
Assessment Objective
the capability to purge or wipe information from {{ insert: param, mp-06.08_odp.01 }} {{ insert: param, mp-06.08_odp.02 }} is provided.
System media protection policy
procedures addressing media sanitization and disposal
system design documentation
system configuration settings and associated documentation
authorization records
media sanitization records
audit records
system security plan
other relevant documents or records
Organizational personnel with system media sanitization responsibilities
organizational personnel with information security responsibilities
system/network administrators
Organizational processes for purging/wiping media
mechanisms supporting and/or implementing purge/wipe capabilities