David: Created page with "To effectively assess whether "system media containing FCI is sanitized or destroyed before disposal" as per your objective "[a]," you'll want to consider both the most appropriate evidence types and prioritizing assessment approaches. == Evidence Types Supported by Assessment Objects == 1. Artifacts (I1): - Media Sanitization Records: These are direct records of media sanitization activities, demonstrating that specific actions were taken. 2. **Document..."

2025-04-07T02:51:55Z

Created page with "To effectively assess whether "system media containing FCI is sanitized or destroyed before disposal" as per your objective "[a]," you'll want to consider both the most appropriate evidence types and prioritizing assessment approaches. == Evidence Types Supported by Assessment Objects == 1. **Artifacts (I1):** - *Media Sanitization Records:* These are direct records of media sanitization activities, demonstrating that specific actions were taken. 2. **Document..."

New page

To effectively assess whether "system media containing FCI is sanitized or destroyed before disposal" as per your objective "[a]," you'll want to consider both the most appropriate evidence types and prioritizing assessment approaches.

== Evidence Types Supported by Assessment Objects ==

1. **Artifacts (I1):**
- *Media Sanitization Records:* These are direct records of media sanitization activities, demonstrating that specific actions were taken.

2. **Document (I2):**
- *System Media Protection Policy:* This document outlines the policy and procedures for handling media containing FCI.
- *Procedures Addressing Media Sanitization and Disposal:* Detailed documents showing how the organization implements its sanitization policies.

3. **Physical Review (I3):**
- Direct observation of physical storage devices, ensuring they are destroyed or sanitized appropriately before disposal can serve as compelling evidence.

4. **Screen Share (I4):**
- While less common for this objective, a screen share showing software tools used to sanitize media could be useful if applicable.

== Prioritization of Assessment Approaches ==

1. **Examine:**
- This approach is prioritized first because it provides tangible documentation and records such as policies, procedures, and sanitization logs that directly support the evidence needed for objective "[a]."

2. **Interview:**
- Interviewing personnel with media sanitization responsibilities can provide context and additional assurance regarding how policies are implemented in practice.

3. **Test:**
- Testing organizational processes may be less critical initially but could serve as a follow-up to validate findings from documentation review and interviews, ensuring that procedures work as intended during actual disposal scenarios.

== Summary ==

For assessing the sanitization or destruction of system media containing FCI before disposal:

- Prioritize gathering artifacts (e.g., sanitization records) and documents (policies/procedures).
- Start with examining existing policies and records to understand formal processes.
- Follow up with interviews for context on policy implementation.
- Use testing if additional verification is needed, focusing on specific cases or anomalies identified during examination and interview phases.

This structured approach ensures a comprehensive assessment aligned with both the requirement and available evidence types.

LLMResponse MP.L2-3.8.3.a - Revision history