CCI-003502

The organization uses organization-defined techniques or methods to ensure secure deletion or destruction of personally identifiable information (PII) (including originals, copies, and archived records).

Implementation Guidance

The organization being inspected/assessed documents and implements a process to use techniques and methods IAW DoD 5400.11-R to ensure secure deletion or destruction of PII (including originals, copies, and archived records). DoD has defined the techniques or methods as techniques and methods IAW DoD 5400.11-R.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed uses techniques and methods IAW DoD 5400.11-R to ensure secure deletion or destruction of PII (including originals, copies, and archived records). DoD has defined the techniques or methods as techniques and methods IAW DoD 5400.11-R.

Compelling Evidence

1.) Site must produce a signed document which describes site's process, techniques and methods of secure deletion or destruction of PII (including originals, copies, and archived records) in accordance with DoD IAW DoD 5400.11-R defined techniques or methods of secure deletion or destruction of PII. 2.) Reviewer will verify that the documentation exists. 3.) Reviewer will verify that the documentation contains and describes site's process, techniques and methods of secure deletion or destruction of PII (including originals, copies, and archived records) in accordance with DoD IAW DoD 5400.11-R defined techniques or methods of secure deletion or destruction of PII. 4.) Reviewer will validate that the site's follows their implemented process by having site's personal demonstrate/describe their process.

The controls below (if any) were marked by NIST as being related to CCI-003502.