3.8.3 Sanitize or destroy system media containing CUI before disposal or release for reuse.
To go back to the NIST 800-171 Controls page, click here.
Guides
- NIST SP 800-88 – Guidelines for Media Sanitization
- National Security Agency / Central Security Service Policy Manual 9-12 Storage Device Sanitization Manual
Example Tools
- NSA/CSS Degaussers
- NSA/CSS Hard Drive Destruction Devices
- NSA/CSS High Security Disintegrators
- NSA/CSS Optical Media Destruction Devices
- NSA/CSS High Security Solid State Destruction Devices
Sample Policy & Procedures
- Texas Department of Public Safety – Procedures for Secure Disposal of Electronic and Physical Media
- Kansas State University – Media Sanitization and Disposal Policy
- Environmental Protection Agency – Sample Policy and Guidance Language for Federal Media Sanitization
Additional Lessons Learned
- Internal Revenue Service – Media Sanitization Methods
- US-CERT – Disposing of Devices Safely
- Brown University – Data Removal Recommendations