id: "MP-08(01)" title: "Documentation of Process" family: "MP" family_name: "Media Protection" sort_id: "mp-08.01" priority: "P2" implementation_level: "organization" parent: "MP-08" enhancement: True
Statement
Document system media downgrading actions.
Guidance
Organizations can document the media downgrading process by providing information, such as the downgrading technique employed, the identification number of the downgraded media, and the identity of the individual that authorized and/or performed the downgrading action.
Assessment Objective
system media downgrading actions are documented.
System media protection policy
procedures addressing media downgrading
system categorization documentation
list of media requiring downgrading
records of media downgrading
audit records
system security plan
other relevant documents or records
Organizational personnel with system media downgrading responsibilities
organizational personnel with information security responsibilities
system/network administrators
Organizational processes for media downgrading
mechanisms supporting and/or implementing media downgrading