CCI-002570

Implementation Guidance

The organization being inspected/assessed documents and implements a process for reviewing and approving media disposal. The process must include procedures for reviewing and approving disposal actions. The organization must maintain a record of media disposal actions.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the record of media disposal actions to ensure the organization being inspected/assessed reviews and approves media disposal actions.

Compelling Evidence

1.) TTP, SOP, or Audit Trail showing review, approval, and record of media disposal actions 2.) System Security Plan (SSP), if necessary, referencing sections which apply to review, approval, and record of media disposal actions.