Attachment_4_Library_LMS_NIST_ITSPP_MP_controls.xlsx
XLSX spreadsheet 13 KB Posted
- Attached to
- Library Management System Federal contract opportunity
- Solicitation number
- ADMIN-18-0087
- Issued by
- Department of Commerce US Census Bureau
About this file
ATTACHMENT 4
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| Library_LMS_RFP_Q&A.docx | DOCX document | |
| Attachment_2_Library_LMS_Section_J.docx | DOCX document | |
| RFP_ADMIN-18-0087.docx | DOCX document | |
| Attachment_3_Library_LMS_Section_J.xlsx | XLSX spreadsheet | |
| Attachment_1_Library_LMS_Section_J.docx | DOCX document | |
| SF1449_RFP__ADMIN-18-0087.pdf | ||
| Attachment_5_Library_LMS_USGV6-v1-sdoc-v1.10.xlsx | XLSX spreadsheet |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
MP-6
| Attachment 4 | CENSUS BUREAU LIBRARY LMS: NIST ITSPP MPP CONTROLS | |||
| Control Number | Control Name | Control Language | Reference(s) | NIST Supplemental Guidance |
| MP-06.00.01.01 | Media Sanitization and Disposal | The organization defines digital and non-digital media to be sanitized using sanitization techniques and procedures defined in MP-01.00.01.01 to MP-01.00.04.02 policy prior to: |
1) disposal
2) release out of organizational control
| 3) release for reuse | o NIST SP 800-88, Revision 1, Guidelines of Media Sanitization - http://csrc.nist.gov/publications/drafts/800-88-rev1/sp800_88_r1_draft.pdf | |||
| o IRS Publication 1075, Tax Information Security Guidelines for Federal, State and Local Agencies - http://www.irs.gov/pub/irs-pdf/p1075.pdf | This control applies to all information system media, both digital and non-digital, subject to disposal or reuse, whether or not the media is considered removable. Examples include media found in scanners, copiers, printers, notebook computers, workstations, network components, and mobile devices. The sanitization process removes information from the media such that the information cannot be retrieved or reconstructed. Sanitization techniques, including clearing, purging, cryptographic erase, and destruction, prevent the disclosure of information to unauthorized individuals when such media is reused or released for disposal. Organizations determine the appropriate sanitization methods recognizing that destruction is sometimes necessary when other methods cannot be applied to media requiring sanitization. Organizations use discretion on the employment of approved sanitization techniques and procedures for media containing information deemed to be in the public domain or publicly releasable, or deemed to have no adverse impact on organizations or individuals if released for reuse or disposal. Sanitization of non-digital media includes, for example, removing a classified appendix from an otherwise unclassified document, or redacting selected sections or words from a document by obscuring the redacted sections/words in a manner equivalent in effectiveness to removing them from the document. NSA standards and policies control the sanitization process for media containing classified information. | |||
| MP-06.00.01.02 | Media Sanitization and Disposal | The organization defines sanitization techniques or procedures to be used for sanitizing digital and non-digital media using sanitization techniques and procedures defined in MP-01.00.01.01 to MP-01.00.04.02 policy prior to: |
1) disposal
2) release out of organizational control
| 3) release for reuse | o NIST SP 800-88, Revision 1, Guidelines of Media Sanitization - http://csrc.nist.gov/publications/drafts/800-88-rev1/sp800_88_r1_draft.pdf | ||||
| o IRS Publication 1075, Tax Information Security Guidelines for Federal, State and Local Agencies - http://www.irs.gov/pub/irs-pdf/p1075.pdf | This control applies to all information system media, both digital and non-digital, subject to disposal or reuse, whether or not the media is considered removable. Examples include media found in scanners, copiers, printers, notebook computers, workstations, network components, and mobile devices. The sanitization process removes information from the media such that the information cannot be retrieved or reconstructed. Sanitization techniques, including clearing, purging, cryptographic erase, and destruction, prevent the disclosure of information to unauthorized individuals when such media is reused or released for disposal. Organizations determine the appropriate sanitization methods recognizing that destruction is sometimes necessary when other methods cannot be applied to media requiring sanitization. Organizations use discretion on the employment of approved sanitization techniques and procedures for media containing information deemed to be in the public domain or publicly releasable, or deemed to have no adverse impact on organizations or individuals if released for reuse or disposal. Sanitization of non-digital media includes, for example, removing a classified appendix from an otherwise unclassified document, or redacting selected sections or words from a document by obscuring the redacted sections/words in a manner equivalent in effectiveness to removing them from the document. NSA standards and policies control the sanitization process for media containing classified information. | ||||
| MP-06.00.01.03 | Media Sanitization and Disposal | The organization sanitizes digital and non-digital media prior to disposal, release out of organizational control, or release for reuse using sanitization techniques and procedures defined in MP-01.00.01.01 to MP-01.00.04.02 policy, in accordance with applicable federal and organizational standards and policies. | o NIST SP 800-88, Revision 1, Guidelines of Media Sanitization - http://csrc.nist.gov/publications/drafts/800-88-rev1/sp800_88_r1_draft.pdf | ||
| o IRS Publication 1075, Tax Information Security Guidelines for Federal, State and Local Agencies - http://www.irs.gov/pub/irs-pdf/p1075.pdf | This control applies to all information system media, both digital and non-digital, subject to disposal or reuse, whether or not the media is considered removable. Examples include media found in scanners, copiers, printers, notebook computers, workstations, network components, and mobile devices. The sanitization process removes information from the media such that the information cannot be retrieved or reconstructed. Sanitization techniques, including clearing, purging, cryptographic erase, and destruction, prevent the disclosure of information to unauthorized individuals when such media is reused or released for disposal. Organizations determine the appropriate sanitization methods recognizing that destruction is sometimes necessary when other methods cannot be applied to media requiring sanitization. Organizations use discretion on the employment of approved sanitization techniques and procedures for media containing information deemed to be in the public domain or publicly releasable, or deemed to have no adverse impact on organizations or individuals if released for reuse or disposal. Sanitization of non-digital media includes, for example, removing a classified appendix from an otherwise unclassified document, or redacting selected sections or words from a document by obscuring the redacted sections/words in a manner equivalent in effectiveness to removing them from the document. NSA standards and policies control the sanitization process for media containing classified information. | ||||
| MP-06.00.02.01 | Media Sanitization and Disposal | The organization employs sanitization mechanisms with strength and integrity commensurate with the security category or classification of the information. | o NIST SP 800-88, Revision 1, Guidelines of Media Sanitization - http://csrc.nist.gov/publications/drafts/800-88-rev1/sp800_88_r1_draft.pdf | ||
| o IRS Publication 1075, Tax Information Security Guidelines for Federal, State and Local Agencies - http://www.irs.gov/pub/irs-pdf/p1075.pdf | This control applies to all information system media, both digital and non-digital, subject to disposal or reuse, whether or not the media is considered removable. Examples include media found in scanners, copiers, printers, notebook computers, workstations, network components, and mobile devices. The sanitization process removes information from the media such that the information cannot be retrieved or reconstructed. Sanitization techniques, including clearing, purging, cryptographic erase, and destruction, prevent the disclosure of information to unauthorized individuals when such media is reused or released for disposal. Organizations determine the appropriate sanitization methods recognizing that destruction is sometimes necessary when other methods cannot be applied to media requiring sanitization. Organizations use discretion on the employment of approved sanitization techniques and procedures for media containing information deemed to be in the public domain or publicly releasable, or deemed to have no adverse impact on organizations or individuals if released for reuse or disposal. Sanitization of non-digital media includes, for example, removing a classified appendix from an otherwise unclassified document, or redacting selected sections or words from a document by obscuring the redacted sections/words in a manner equivalent in effectiveness to removing them from the document. NSA standards and policies control the sanitization process for media containing classified information. |
&F &D &T Page &P of &N Pages
File details come from the government source that posted it.