|
controlMP-6
Media Sanitization (MP-6)
Sanitize [organization-defined] prior to disposal, release out of organizational control, or release for reuse using [organization-defined] ; and Employ sanitization mechanisms with the strength and integrity commensurate with the security category or classification of the information.
Security Baselines
LOWMODERATEHIGH
media-protectionsanitization
Why These Connect
Maps To2
These are equivalent or closely aligned requirements in other frameworks.
Baselined In3
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports18
These related controls work together — a change to one may affect the others.
Enhances8
These enhancements add specific capabilities or refinements to the base control.
Related Controls(14)
AU-11Audit Record Retention (AU-11)
LMH
MA-2Controlled Maintenance (MA-2)LMH
MP-2Media Access (MP-2)LMH
AC-3Access Enforcement (AC-3)LMH
AC-7Unsuccessful Logon Attempts (AC-7)LMH
MA-3Maintenance Tools (MA-3)MH
MA-4Nonlocal Maintenance (MA-4)LMH
MA-5Maintenance Personnel (MA-5)LMH
PM-22Personally Identifiable Information Quality Management (PM-22)SI-12Information Management and Retention (SI-12)LMH
SI-18Personally Identifiable Information Quality Operations (SI-18)SI-19De-identification (SI-19)SR-11Component Authenticity (SR-11)LMH
SR-12Component Disposal (SR-12)LMH
Cross-Framework Mappings(2)
ISO 27001ISO/IEC 27001:20224 mappingsFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022
HIPAAHIPAA Security Rule3 mappingsFinal
NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5
Organization-Defined Parameters(6)
Assignmentorganization-defined system media
Assignmentorganization-defined system media
Assignmentorganization-defined system media
Assignmentorganization-defined sanitization techniques and procedures
Assignmentorganization-defined sanitization techniques and procedures
Assignmentorganization-defined sanitization techniques and procedures
Control Enhancements(8)
MP-6(1)Review, Approve, Track, Document, and Verify (MP-6(1))
H
MP-6(2)Equipment Testing (MP-6(2))H
MP-6(3)Nondestructive Techniques (MP-6(3))H
MP-6(4)Controlled Unclassified Information (MP-6(4))WMP-6(5)Classified Information (MP-6(5))WMP-6(6)Media Destruction (MP-6(6))WMP-6(7)Dual Authorization (MP-6(7))MP-6(8)Remote Purging or Wiping of Information (MP-6(8))