MP-7(2)

Requirement

Prohibit the use of sanitization-resistant media in organizational systems.

Discussion

Sanitization resistance refers to how resistant media are to non-destructive sanitization techniques with respect to the capability to purge information from media. Certain types of media do not support sanitization commands, or if supported, the interfaces are not supported in a standardized way across these devices. Sanitization-resistant media includes compact flash, embedded flash on boards and devices, solid state drives, and USB removable media.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System media protection policy; system use policy; procedures addressing media usage restrictions; rules of behavior; system configuration settings and associated documentation; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with system media use responsibilities; organizational personnel with information security responsibilities; system/network administrators].

Test

[SELECT FROM: Organizational processes for media use; mechanisms prohibiting use of media on systems or system components].

ID	Assessment Objectives
MP-07(02)[01]	sanitization-resistant media is identified;
MP-07(02)[02]	the use of sanitization-resistant media in organizational systems is prohibited.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!