Description
Applicability
-
This Control applies to all information resources managed by the university.
-
The owner of an information resource, or designee, is responsible for ensuring that the measures described in this Control are implemented.
Implementation
-
1
Information system users shall sanitize information system media prior to disposal, release from university control, or release for sale or reuse.
-
1.1
Sanitization may be by such means as:
-
1.1.1
overwriting or modifying media to make it unreadable or indecipherable, or
-
1.1.2
physically destroying media.
-
1.1.1
-
1.2
Disposal must be in accordance with state requirements and applicable university records retention schedules and data classification.
-
1.1
-
2
Media containing Critical, Confidential or University-Internal data must be protected (e.g., encryption, sanitation, etc.) prior to releasing to any third party (unauthorized user).