Attachment A Certificate of Media Santization (002).docx
DOCX document 568 KB Posted
- Attached to
- Penetration Testing State and local contract opportunity
- Solicitation number
- 25RFP13436
- Issued by
- Minnehaha County, South Dakota
About this file
The document is a Certificate of Media Sanitation form from the State of South Dakota, specifically designed for offsite data sanitization procedures within the state's information technology infrastructure. The form provides detailed instructions for contractors to follow the state's Information Technology Security Policy (ITSP-Contractor 230.77) when sanitizing media containing confidential data, requiring comprehensive documentation of the sanitization process, including details about the data owner, type of media, sanitization method, and verification by a separate individual. The form must be completed and sent to the State Contact, who will forward it to the Data Center Director, with electronic copies being acceptable.
The certificate emphasizes strict security protocols, requiring requestors to classify data confidentiality levels, document the sanitization tool and method used, and verify that only low or moderate confidentiality data can be potentially reused. The form includes sections for requestor information, data details, sanitization specifics, verification details, and approver signatures. While not directly linked to a specific procurement, the document reflects the state's rigorous approach to data management, highlighting the importance of secure media sanitization and the need for meticulous record-keeping in government IT operations. The form is dated 02/22/2019 and is marked as "NOT FOR PUBLIC DISTRIBUTION."
View the file
Other files for this state and local contract opportunity
| File | Type | Posted |
|---|---|---|
| RFP Document.pdf | ||
| Response to Offeror Questions document.pdf | ||
| Attachment B ITSP.pdf | ||
| Attachment C Contractor Security Acknowledgement Form (002).docx | DOCX document | |
| Attachment B ITSP.pdf | ||
| Attachment C Contractor Security Acknowledgement Form (002).docx | DOCX document | |
| RFP Document.pdf | ||
| Attachment A Certificate of Media Santization (002).docx | DOCX document |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Certificate of Media Sanitation for Offsite Data
Instructions
1. Follow State security policy in Information Technology Security Policy- Contractor 230.77, (ITSP- Contractor) the policy can also be found at bit.sd/gov/vendor/default.aspx.
2. Fill out the required section of this form and obtain approvals.
3. Send the completed certificate to the State Contact.
Section 1. Required
Requestor Name Company Email Phone Classification of the confidentiality of the data [Person filling out this form, requesting the sanitization]
[Example- Moderate, see ITSP- Contractor 230.77, Data Classification Table can be found on the Vendor Information webpage.]
Data Owner State Contact [The State agency that is the data owner Current State agency contact]
Person conducting the sanitization Company Email Phone
Database Name
Type of media Model Serial Number [For example- Hard Drive HPE model # 512547-B21 12345]
If there are copies of the data, list the location
Type of sanitization Method used to sanitize Tool used to sanitize [For example- Purged Microsoft SQL Server purge function Microsoft SQL Server 2014]
| Was the data one of the following: |
| ☐ FTI ☐ ePHI ☐ FPLS ☐ CJIS |
Person who verified the sanitization Date Email Phone [This person should be different then the person doing the sanitization.]
Verification Method
Verification Notes
| If the media was reused what are the destination details |
| [Example- Media was reused by (name) data center. Note only data that is classified low or moderate confidentiality can be reused, see ITSP- Contractor 230.77.] |
Section 2. Approvers
| Approvers |
| Signature |
| Date |
[Name of Sanitizer]
[Name of Verifier]
Wayne Hayden-Moreland Data Center Director
This certificate must be sent to the State Contact who will send it to the Data Center Director. Electronic copies are acceptable.
Page | 1 02/22/2019
NOT FOR PUBLIC DISTRIBUTION
image1.jpeg image2.emf image3.png
File details come from the government source that posted it. Updated .