사이버보안 GRC 15개 항목
Media Sanitization & Secure Data Disposal (NIST 800-88)
이 체크리스트는 영어로 제공됩니다.
Assesses secure media sanitization and data disposal practices using NIST SP 800-88, covering categorization, sanitization methods, verification, and certificate of destruction.
NIST 800-88NIST 800-53ISO 27001
무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.
Policy & Categorization
- Is a media sanitization policy documented covering all media types? *
- Is the sanitization method selected based on data confidentiality and reuse decision? *
- Is an inventory maintained of media pending sanitization or destruction? *
- Are media types and their appropriate techniques documented (HDD, SSD, tape, mobile, cloud)?
Sanitization Methods
- Is the correct level (Clear, Purge, or Destroy) applied per data sensitivity? *
- Are cryptographic-erase or purge techniques used for SSDs and self-encrypting drives? *
- Is physical destruction (shred/disintegrate/degauss) used for highest-sensitivity media?
- Is cloud/virtual data disposal addressed (crypto-erase, provider attestation)?
Verification & Documentation
- Is sanitization verified before media is released or reused? *
- Is a certificate or record of sanitization/destruction retained per asset? *
- Does the record capture media ID, method, operator, and date? *
- Is chain of custody maintained until sanitization is complete?
Third-Party Disposal
- Are third-party ITAD/disposal vendors vetted and under contract with security requirements? *
- Are certificates of destruction obtained and reconciled against the media inventory? *
- Is vendor destruction periodically audited or witnessed?
Media Sanitization & Secure Data Disposal (NIST 800-88) 체크리스트 전체 다운로드
인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.