CCI-002598

The organization ensures that the information system media downgrading process is commensurate with the security category and/or classification level of the information to be removed and the access authorizations of the potential recipients of the downgraded information.

Implementation Guidance

The organization being inspected/assessed includes within the process defined in MP-8, CCI 2596, processes which are commensurate with the security category and/or classification level of the information to be removed and the access authorizations of the potential recipients of the downgraded information.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process defined in MP-8, CCI 2596 to ensure it is commensurate with the security category and/or classification level of the information to be removed and the access authorizations of the potential recipients of the downgraded information.

Compelling Evidence

1.) Signed and dated SOP or TTP, referencing section which shows that downgrading of media is commensurate with the proper security category

The controls below (if any) were marked by NIST as being related to CCI-002598.