MP-6(1): Review, Approve, Track, Document, and Verify

Control Family:

Media Protection

CSF v1.1 References:


  • High

Previous Version:

Control Statement

Review, approve, track, document, and verify media sanitization and disposal actions.

Supplemental Guidance

Organizations review and approve media to be sanitized to ensure compliance with records retention policies. Tracking and documenting actions include listing personnel who reviewed and approved sanitization and disposal actions, types of media sanitized, files stored on the media, sanitization methods used, date and time of the sanitization actions, personnel who performed the sanitization, verification actions taken and personnel who performed the verification, and the disposal actions taken. Organizations verify that the sanitization of the media was effective prior to disposal.