MP.L2-3.8.3Media Disposal [CUI Data]
Sanitize or destroy system media containing CUI before disposal or release for reuse.
[a]
system media containing CUI is sanitized or destroyed before disposal; and[b]
system media containing CUI is sanitized before it is released for reuse.
Full-disk encryption plus cryptographic erase; destroy when CE cannot be verified
Implementation
AO coverage. Addresses all media sanitization objectives for this practice.
Prerequisite. All in-scope endpoints use full-disk encryption with keys escrowed to the directory/MDM. Removable media that may hold CUI must use hardware-encrypted drives issued by IT; consumer USB is blocked by MDM.
Decision matrix (SOP).
- Reuse inside org, CE verified: Cryptographic erase — destroy/wipe recovery keys in escrow, confirm device cannot unlock, then redeploy.
- Leaving org control, or CE not verified (failed TPM, unknown prior ownership): Physical destruction via approved vendor; certificate of destruction required.
- Paper / optical: Cross-cut shred to policy particle size; bin logs retained.
SSD note. Do not rely on a single “quick format.” Prefer CE on encrypted volumes; if a drive was never encrypted under org keys, treat as destroy or vendor purge with verification.
Maintenance. Asset retirement tickets cannot close without sanitization method, operator, timestamp, and either key-destruction screenshot or CoD attachment. Quarterly sample: pick three retired assets and verify evidence completeness.
Accepted gap. One CNC controller disk cannot run org FDE. It is air-gapped; at end of life it is always physically destroyed (no CE path).
What the evidence looks like
- Media sanitization SOP with 800-88 Clear/Purge/Destroy mapping
- FDE policy + escrow configuration export
- Closed retirement tickets with key-destruction proof or CoD
- USB block MDM profile
- Quarterly evidence sampling checklist
Environment
Tools
Was this example useful?
Quick reaction — no account needed. For reasoning that moves the community meter, cast a full verdict below.
Discussion(0)
No discussion on this example yet
Verdicts capture a conclusion. Use a thread when the interesting part is the argument.
Sign in to start a thread.