DCS-05: Off-Site Equipment

Control Family:

Datacenter Security

CSF v1.1 References:

PF v1.0 References:

Threats Addressed:

Warning icon.

Control is withdrawn in the next version of this control set and incorporated into: DCS-01: Off-Site Equipment Disposal Policy and Procedures.

Control Statement

Policies and procedures shall be established for the secure disposal of equipment (by asset type) used outside the organization’s premises. This shall include a wiping solution or destruction process that renders recovery of information impossible. The erasure shall consist of a full overwrite of the drive to ensure that the erased drive is released to inventory for reuse and deployment, or securely stored until it can be destroyed.

[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]

Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.