MP-6(2)

Requirement

Test sanitization equipment and procedures [Assignment: organization-defined frequency] to ensure that the intended sanitization is being achieved.

Discussion

Testing of sanitization equipment and procedures may be conducted by qualified and authorized external entities, including federal agencies or external service providers.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System media protection policy; procedures addressing media sanitization and disposal; procedures addressing testing of media sanitization equipment; results of media sanitization equipment and procedures testing; system audit records; records retention and disposition policy; records retention and disposition procedures; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with system media sanitization responsibilities; organizational personnel with records retention and disposition responsibilities; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Organizational processes for media sanitization; automated mechanisms supporting and/or implementing media sanitization; automated mechanisms supporting and/or implementing media sanitization procedures; sanitization equipment].

ID	Assessment Objectives
MP-06(02)[01]	sanitization equipment is tested <MP-06(02)_ODP[01] frequency> to ensure that the intended sanitization is being achieved;
MP-06(02)[02]	sanitization procedures are tested <MP-06(02)_ODP[02] frequency> to ensure that the intended sanitization is being achieved.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!