CCI-002594

Downgrade system media containing classified information prior to release to individuals without required access authorizations.

Implementation Guidance

The organization being inspected/assessed implements a process to downgrade information system media containing classified information prior to release to individuals without required access authorizations in accordance with NSA standards and policies. The organization must maintain a record of release of media containing classified information and a record of information system media downgrade.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the record of release of media containing classified information as well as records of information system media downgrade to ensure the organization being inspected/assessed implements a process to downgrade information system media containing classified information prior to release to individuals without required access authorizations in accordance with NSA standards and policies.

Compelling Evidence

1.) Signed and dated SOP or TTP addressing the release of information system media to individuals without required access authorizations

The controls below (if any) were marked by NIST as being related to CCI-002594.