Applicable

(Y)es / (N)o

(C)onfidentiality

(I)ntegrity

(A)vailability

RPN

(C+I+A)

(S)atisfactory

L1

M2

H3

L1

M2

H3

L1

M2

H3

(O)ther than satisfactory +##

mp-8(4)

media downgrading  | classified information

assessment objective:

Determine if the organization downgrades information system media containing classified information prior to release to individuals without required access authorizations in accordance with NSA standards and policies.  

potential assessment methods and objects:

Examine: [select from: Information system media protection policy; access authorization policy; procedures addressing downgrading of media containing classified information; procedures addressing handling of classified information; NSA standards and policies regarding protection of classified information; media downgrading records; other relevant documents or records].

Interview: [select from: Organizational personnel with information system media downgrading responsibilities; organizational personnel with information security responsibilities].

Test: [select from: Organizational processes for media downgrading; automated mechanisms supporting and/or implementing media downgrading].