CCI-002575

The organization defines information systems, system components, or devices from which information is to be purged/wiped, either remotely or under the organization-defined conditions.

Implementation Guidance

The organization being inspected/assessed defines and documents information systems, system components, or devices that information should be purged/wiped either remotely or under the organization-defined conditions. DoD has determined the information systems, system components, or devices are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented information systems, system components, or devices to ensure the organization being inspected/assessed defines information systems, system components, or devices that information should be purged/wiped either remotely or under the organization-defined conditions. DoD has determined the information systems, system components, or devices are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated SOP or TTP showing definition for wiping/purging of systems or system devices

The controls below (if any) were marked by NIST as being related to CCI-002575.