MP-8(1)

Requirement

Document system media downgrading actions.

Discussion

Organizations can document the media downgrading process by providing information, such as the downgrading technique employed, the identification number of the downgraded media, and the identity of the individual that authorized and/or performed the downgrading action.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System media protection policy; procedures addressing media downgrading; system categorization documentation; list of media requiring downgrading; records of media downgrading; audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with system media downgrading responsibilities; organizational personnel with information security responsibilities; system/network administrators].

Test

[SELECT FROM: Organizational processes for media downgrading; mechanisms supporting and/or implementing media downgrading].

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!