CCI-002586

Implementation Guidance

Determine if: - sanitization-resistant media is identified. - the use of sanitization-resistant media in organizational systems is prohibited.

Validation Procedures

Examine: [SELECT FROM: System media protection policy; system use policy; procedures addressing media usage restrictions; rules of behavior; system configuration settings and associated documentation; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system media use responsibilities; organizational personnel with information security responsibilities; system/network administrators]. Test: [SELECT FROM: Organizational processes for media use; mechanisms prohibiting use of media on systems or system components].