id: "MP-08(01)" title: "Documentation of Process" family: "MP" family_name: "Media Protection" sort_id: "mp-08.01" priority: "P2" implementation_level: "organization" parent: "MP-08" enhancement: True


Statement

Document system media downgrading actions.

Guidance

Organizations can document the media downgrading process by providing information, such as the downgrading technique employed, the identification number of the downgraded media, and the identity of the individual that authorized and/or performed the downgrading action.

Assessment Objective

system media downgrading actions are documented.

System media protection policy

procedures addressing media downgrading

system categorization documentation

list of media requiring downgrading

records of media downgrading

audit records

system security plan

other relevant documents or records

Organizational personnel with system media downgrading responsibilities

organizational personnel with information security responsibilities

system/network administrators

Organizational processes for media downgrading

mechanisms supporting and/or implementing media downgrading