DCS-05: Off-Site Equipment

Control Family:

Datacenter Security

CSF v1.1 References:

PF v1.0 References:

Threats Addressed:

Control Statement

Policies and procedures shall be established for the secure disposal of equipment (by asset type) used outside the organization’s premises. This shall include a wiping solution or destruction process that renders recovery of information impossible. The erasure shall consist of a full overwrite of the drive to ensure that the erased drive is released to inventory for reuse and deployment, or securely stored until it can be destroyed.