id: "MP-07(02)" title: "Prohibit Use of Sanitization-resistant Media" family: "MP" family_name: "Media Protection" sort_id: "mp-07.02" priority: "P2" implementation_level: "organization" parent: "MP-07" enhancement: True


Statement

Prohibit the use of sanitization-resistant media in organizational systems.

Guidance

Sanitization resistance refers to how resistant media are to non-destructive sanitization techniques with respect to the capability to purge information from media. Certain types of media do not support sanitization commands, or if supported, the interfaces are not supported in a standardized way across these devices. Sanitization-resistant media includes compact flash, embedded flash on boards and devices, solid state drives, and USB removable media.

Assessment Objective: sanitization-resistant media is identified;

Assessment Objective: the use of sanitization-resistant media in organizational systems is prohibited.

System media protection policy

system use policy

procedures addressing media usage restrictions

rules of behavior

system configuration settings and associated documentation

system security plan

other relevant documents or records

Organizational personnel with system media use responsibilities

organizational personnel with information security responsibilities

system/network administrators

Organizational processes for media use

mechanisms prohibiting use of media on systems or system components