Which SP 800 document would you consult for media sanitization guidelines and tools?

• A. Guideline for Media Santitization
• B. Information Security Continuous Monitoring for Federal Information System and Org
• C. Guide to Protecting the Confidentiality of PII
• D. Technical Guide to Information Security Testing and Assessment

Answer: (A)

Media sanitization is about removing data so it cannot be recovered when you dispose of or repurpose storage. The SP 800 document that covers this topic is the Guideline for Media Sanitization. It provides the framework for selecting sanitization methods based on the type of media and the level of data sensitivity, defining three levels of sanitization—Clear, Purge, and Destroy—and explaining when each applies. It also covers cryptographic erasure as an option for certain media, guidance on appropriate sanitization tools and techniques, and how to verify that sanitization has been effectively completed and documented. This makes it the go-to resource when you need concrete procedures to safely sanitize media and ensure compliance. The other SP 800 documents focus on different areas—continuous monitoring of federal information systems, protecting the confidentiality of PII, and conducting security testing and assessment—so they don’t specifically address the guidelines and tools for media sanitization.