Navigate

CCI-002595

CCI-002595 Definition

The organization establishes an organization-defined information system media downgrading process that includes employing downgrading mechanisms with organization-defined strength and integrity.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Compelling Evidence

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002595.

Control	Description
MP-8	The organization: a: Establishes [organization-defined information system media downgrading process] that includes employing downgrading mechanisms with [organization-defined strength and integrity]; b: Ensures that the information system media downgrading process is commensurate with the security category and/or classification level of the information to be removed and the access authorizations of the potential recipients of the downgraded information; c: Identifies [organization-defined information system media requiring downgrading]; and d: Downgrades the identified information system media using the established process.

Control

Description

MP-8

The organization:

a: Establishes [organization-defined information system media downgrading process] that includes employing downgrading mechanisms with [organization-defined strength and integrity];

b: Ensures that the information system media downgrading process is commensurate with the security category and/or classification level of the information to be removed and the access authorizations of the potential recipients of the downgraded information;

c: Identifies [organization-defined information system media requiring downgrading]; and

d: Downgrades the identified information system media using the established process.