CCI-003391

The organization disposes of information system components using organization-defined techniques and methods.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to dispose of information system components using techniques and methods defined IAW DoD Manual 5200.01. The organization must maintain a record of disposal. DoD has defined the techniques and methods as defined IAW DoD Manual 5200.01.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the record of disposal to ensure the organization being inspected/assessed disposes of information system components using techniques and methods defined IAW DoD Manual 5200.01. DoD has defined the techniques and methods as defined IAW DoD Manual 5200.01.

Compelling Evidence

1.) System security plan (SSP). 2.) System development life cycle (SDLC) documentation. 3.) Continuous monitoring plan for disposing of information system components using organization-defined techniques and methods.

The controls below (if any) were marked by NIST as being related to CCI-003391.