CCI-002567

Implementation Guidance

The organization being inspected/assessed documents and implements a process for reviewing and approving media sanitization. The process must include procedures for reviewing and approving sanitization actions. The organization must maintain a record of media sanitization actions.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the record of media sanitization actions to ensure the organization being inspected/assessed reviews and approves media sanitization actions.

Compelling Evidence

1.) TTP, SOP, or Audit Trail showing documented process and record of reviewing media sanitation 2.) System Security Plan (SSP), if necessary, referencing sections which apply to reviewing and record of media sanitation