MP-6(1): Review / Approve / Track / Document / Verify

Control Family:

Media Protection

CSF v1.1 References:

Baselines:

  • High

Next Version:

Control Statement

The organization reviews, approves, tracks, documents, and verifies media sanitization and disposal actions.

Supplemental Guidance

Organizations review and approve media to be sanitized to ensure compliance with records-retention policies. Tracking/documenting actions include, for example, listing personnel who reviewed and approved sanitization and disposal actions, types of media sanitized, specific files stored on the media, sanitization methods used, date and time of the sanitization actions, personnel who performed the sanitization, verification actions taken, personnel who performed the verification, and disposal action taken. Organizations verify that the sanitization of the media was effective prior to disposal.