CCI-002575

Defines systems or system components from which information is purged or wiped, either remotely or under the organization-defined conditions.

Implementation Guidance

Determine if the capability to purge or wipe information from [MP-06(08)_ODP[01]; systems or system components to purge or wipe information either remotely or under specific conditions are defined] [MP-06(08)_ODP[02]; one of the following PARAMETER VALUES is selected: {remotely; under [MP-06(08)_ODP[03]; conditions under which information is to be purged or wiped are defined (if selected)]}] is provided.

Validation Procedures

Examine: [SELECT FROM: System media protection policy; procedures addressing media sanitization and disposal; system design documentation; system configuration settings and associated documentation; authorization records; media sanitization records; audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system media sanitization responsibilities; organizational personnel with information security responsibilities; system/network administrators]. Test: [SELECT FROM: Organizational processes for purging/wiping media; mechanisms supporting and/or implementing purge/wipe capabilities].

The controls below (if any) were marked by NIST as being related to CCI-002575.