CCI-002571

Implementation Guidance

The organization being inspected/assessed documents and implements a process for tracking media disposal. The process must include procedures for tracking disposal actions. The organization must maintain a record of media disposal actions.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the record of media disposal actions to ensure the organization being inspected/assessed tracks and documents media disposal actions.

Compelling Evidence

1.) TTP, SOP, or Audit Trail showing review, approval, and record of media disposal actions 2.) System Security Plan (SSP), if necessary, referencing sections which apply to review, approval, and record of media disposal actions.