CCI-002593

Downgrade system media containing Controlled Unclassified Information (CUI) prior to public release.

Implementation Guidance

The organization being inspected/assessed implements a process to downgrade information system media containing any Controlled Unclassified Information (CUI) prior to public release in accordance with applicable federal and organizational standards and policies. The organization must maintain a record of public release of media and a record of information system media downgrade. DoD has defined the Controlled Unclassified Information (CUI) as any Controlled Unclassified Information (CUI).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the record of public release of media as well as records of information system media downgrade to ensure the organization being inspected/assessed implements a process to downgrade information system media containing any Controlled Unclassified Information (CUI) prior to public release in accordance with applicable federal and organizational standards and policies. DoD has defined the Controlled Unclassified Information (CUI) as any Controlled Unclassified Information (CUI).

Compelling Evidence

1.) Signed and dated SOP or TTP showing release of unclassified information in accordance with federal policies

The controls below (if any) were marked by NIST as being related to CCI-002593.