Media Protection · MP.L1-b.1.vii(a)
System media containing [FCI] is sanitized or destroyed before disposal
An assessment objective under requirement MP.L1-b.1.vii, Media Disposal, in the Media Protection domain.
Objective Statement
System media containing [FCI] is sanitized or destroyed before disposal
Objective identity
- Framework
- Cybersecurity Maturity Model Certification · Level 1
- Domain
- Media Protection (MP)
- Objective ID
- MP.L1-b.1.vii(a)
- Parent Requirement
- MP.L1-b.1.vii · Sanitize or destroy media before disposal or reuse
Assessment Procedures
The official government assessment method for this objective, exactly as printed in the DoD CMMC Assessment Guide, Level 1, which reprints it from NIST SP 800-171A (June 2018). An assessor examines artifacts, interviews people, and tests mechanisms to determine the result.
Examine
- System media protection policy
- Procedures addressing media sanitization and disposal
- Applicable standards and policies addressing media sanitization
- System security plan
- Media sanitization records
- System audit logs and records
- System design documentation
- System configuration settings and associated documentation
- Other relevant documents or records
Interview
- Personnel with media sanitization responsibilities
- Personnel with information security responsibilities
- System or network administrators
Test
- Organizational processes for media sanitization
- Mechanisms supporting or implementing media sanitization
Related Objectives
Source Authority
- Primary Authority
- NIST SP 800-171A (June 2018)
- Official Text
- Requirement Authority
- FAR 52.204-21(b)(1)
- Program Authority
- 32 CFR 170.15(c)(1)(ii) Table 2
- Framework Version
- CMMC Assessment Guide, Level 1 v2.13 (September 2024)
- Effective Date
- 2024-12-16
- Last Verified
- 2026-10-02
Cite This Page
“CMMC MP.L1-b.1.vii(a): System media containing [FCI] is sanitized or destroyed before disposal.” AssessrLog, a product of ProfytAI Pte. Ltd.. Last verified 2026-10-02. https://assessrlog.com/cmmc/objectives/system-media-containing-fci-is-sanitized-or-destroyed-before-disposal/
Build the Record Behind This
AssessrLog logs the determination for this objective with its evidence and source record, so your Level 1 self-assessment stays traceable and ready to affirm. The MET, NOT MET, or N/A call is always yours to make.