MP.L1-3.8.3

Media Disposal Sanitize or destroy information system media containing Federal
Contract Information before disposal or release for reuse.
Any old storage devices, hard drives, flash drives, SSDs, or computers are properly and entirely destroyed to prevent the disclosure of information.


Example

As you pack for an office move, you find some old CDs in a file cabinet. You determine that one has information about an old project your company did for the DoD. You shred the CD rather than simply throwing it in the trash [a].


References
– ANSI/ISA-62443-4-1-2018 7.2.2
-NIST SP 800-171r2 3.8.3

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r2.pdf

-NIST SP 800-82r3 6.2.7
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r3.pdf