id: "MP-07(02)" title: "Prohibit Use of Sanitization-resistant Media" family: "MP" family_name: "Media Protection" sort_id: "mp-07.02" priority: "P2" implementation_level: "organization" parent: "MP-07" enhancement: True
Statement
Prohibit the use of sanitization-resistant media in organizational systems.
Guidance
Sanitization resistance refers to how resistant media are to non-destructive sanitization techniques with respect to the capability to purge information from media. Certain types of media do not support sanitization commands, or if supported, the interfaces are not supported in a standardized way across these devices. Sanitization-resistant media includes compact flash, embedded flash on boards and devices, solid state drives, and USB removable media.
Assessment Objective: sanitization-resistant media is identified;
Assessment Objective: the use of sanitization-resistant media in organizational systems is prohibited.
System media protection policy
system use policy
procedures addressing media usage restrictions
rules of behavior
system configuration settings and associated documentation
system security plan
other relevant documents or records
Organizational personnel with system media use responsibilities
organizational personnel with information security responsibilities
system/network administrators
Organizational processes for media use
mechanisms prohibiting use of media on systems or system components