STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.
← All Controls

MP-8

Media ProtectionRev 5organization

Media Downgrading

Control Statement

a. Establish [Assignment: system media downgrading process] that includes employing downgrading mechanisms with strength and integrity commensurate with the security category or classification of the information; b. Verify that the system media downgrading process is commensurate with the security category and/or classification level of the information to be removed and the access authorizations of the potential recipients of the downgraded information; c. Identify [Assignment: system media requiring downgrading] ; and d. Downgrade the identified system media using the established process.

Supplemental Guidance

Media downgrading applies to digital and non-digital media subject to release outside of the organization, whether the media is considered removable or not. When applied to system media, the downgrading process removes information from the media, typically by security category or classification level, such that the information cannot be retrieved or reconstructed. Downgrading of media includes redacting information to enable wider release and distribution. Downgrading ensures that empty space on the media is devoid of information.

CCI Identifiers (12)

CCI-002595The organization establishes an organization-defined information system media downgrading process that includes employing downgrading mechanisms with organization-defined strength and integrity.deprecatedCCI-002596The organization establishes and defines an information system media downgrading process that includes employing downgrading mechanisms with organization-defined strength and integrity.CCI-002597The organization defines strength and integrity for downgrading mechanisms to establish an organization-defined information system media downgrading process.CCI-002598The organization ensures that the information system media downgrading process is commensurate with the security category and/or classification level of the information to be removed and the access authorizations of the potential recipients of the downgraded information.CCI-002599The organization defines and identifies the information system media requiring downgrading.CCI-002600Downgrade the identified system media using the established process.CCI-004221Establish an organization-defined system media downgrading process that includes employing downgrading mechanisms with strength and integrity commensurate with the security category or classification of the information.CCI-004222Defines the system media downgrading process that includes employing downgrading mechanisms with strength and integrity commensurate with the security category or classification of the information.CCI-004223Verify that the system media downgrading process is commensurate with the security category and/or classification level of the information to be removed.CCI-004224Verify that the system media downgrading process is commensurate with the access authorizations of the potential recipients of the downgraded information.CCI-004225Identify organization-defined system media requiring downgrading.CCI-004226Defines the system media requiring downgrading.

Linked STIG Checks (0)

No STIG checks reference this control.