Study. uk . com
  1. Home
  2. All questions
  3. Question 167

CISSP study material · question 167 of 500

A firm is deciding whether to sanitize retired media in house or ship it to a contractor. Which two considerations does NIST SP 800-88 Rev. 2 raise? Choose two.

  1. Losing control of media holding sensitive data may itself constitute a breach.
  2. Whether sanitization happens on site or off site is an explicit decision factor.
  3. Off-site sanitization is acceptable only after the media has been degaussed.
  4. Third-party sanitization is prohibited for any media categorised above low.
Show the answer

Answer: B. Whether sanitization happens on site or off site is an explicit decision factor.
A. Losing control of media holding sensitive data may itself constitute a breach.

SP 800-88 lists in-house versus third-party and on-site versus off-site among the factors influencing the decision, and notes losing control of certain sensitive media may itself be a breach.

Source: NIST SP 800-88 Rev. 2 (NIST) — SP 800-88 Rev. 2 > 2.4 Factors Influencing Sanitization and Disposal Decisions

Challenge yourself on this topic → Study as cards