Navigate

CCI-002596

CCI-002596 Definition

The organization establishes and defines an information system media downgrading process that includes employing downgrading mechanisms with organization-defined strength and integrity.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002596.

Control	Description
MP-8	The organization: a: Establishes [one of ] that includes employing downgrading mechanisms with [one of ]; b: Ensures that the information system media downgrading process is commensurate with the security category and/or classification level of the information to be removed and the access authorizations of the potential recipients of the downgraded information; c: Identifies [one of ]; and d: Downgrades the identified information system media using the established process.

Control

Description

MP-8

The organization:

a: Establishes [one of ] that includes employing downgrading mechanisms with [one of ];

b: Ensures that the information system media downgrading process is commensurate with the security category and/or classification level of the information to be removed and the access authorizations of the potential recipients of the downgraded information;

c: Identifies [one of ]; and

d: Downgrades the identified information system media using the established process.