CCI-002572

Implementation Guidance

The organization being inspected/assessed documents and implements a process for media disposal. The process must include procedures for verification of disposal actions. The organization must maintain a record of media disposal actions including verification information.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the record of media disposal actions to ensure the organization being inspected/assessed verifies media disposal actions.

Compelling Evidence

1.) TTP, SOP, or Audit Trail showing verification of media disposal actions. 2.) System Security Plan (SSP), if necessary, referencing sections which apply to verification and record of media disposal actions.