Aspects
1
Controls
2
Requirements
2
| Aspect ID | Aspect Name | Control ID | Control Name | Requirement ID | Requirement | Level |
|---|---|---|---|---|---|---|
| 1.06 | Data Sanitization Documentation | 1.06.1 | Data Sanitization Policy Existence | 1.06.1.1 | Policy and procedure document(s) exist that conform to NIST SP 800-88 by defining the requirements for sanitizing and the destruction of media that holds key material. The policy and procedure documentation is read/understood by all staff who have access to key material. | Level I |
| 1.06 | Data Sanitization Documentation | 1.06.2 | Media Sanitization Audit Documentation | 1.06.2.1 | An audit trail is maintained for every piece of sanitized media conforming to the NIST SP 800-88 recommendation. These audit documents identify personnel who performed the sanitization, the specific identifiers of the media that was sanitized, which tool and configuration was used to perform the sanitization, and all other relevant pertinent information. | Level III |
Page 1 of 1