Requirement
Cybersecurity requirements for secure data disposal must cover at least the following:
Sub-Controls
2-6-1-1
Requirement: Identification of technologies, tools and procedures for the implementation of secure data disposal according to the data classification level.
2-6-1-2
Requirement: When storage media is no longer needed, it must be securely disposed by using the technologies, tools and procedures identified in subcontrol 2-6-1-1.
2-6-1-3
Requirement: When storage media needs to be re-used, data must be securely erased (secure erasure) in a manner it cannot be recovered.
2-6-1-4
Requirement: Implementation of secure data disposal or erasure operations referred to in sub-controls 2-6-1-2 and 2-6-1-3 must be verified.
2-6-1-5
Requirement: Keeping a record of all secure data disposal and erasure operations that have been conducted.
