CCI-002573

Implementation Guidance

The organization being inspected/assessed documents and implements a process for dual authorization for the sanitization of information system media defined in MP-6 (7), CCI 2574. The organization must maintain a record of sanitization actions for media defined in MP-6 (7), CCI 2574.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as a sampling of records of sanitization actions to ensure the organization being inspected/assessed enforces dual authorization for the sanitization of information system media defined in MP-6 (7), CCI 2574.

Compelling Evidence

1.) Signed and dated SOP or TTP showing the dual authorization for organization-defined information system media, referencing section referring to enforcement of dual authorization