How to Complete a Risk Assessment in 5 Days or Less

334  ◾  How to Complete a Risk Assessment in 5 Days or Less

NERC CIP-007-1 System Security Management

R 7 Disposal or Redeployment Formal methods, processes, and procedures must be implemented to control the

disposal or redeployment of Cyber Assets within the ESP.

R 7.1

Data Storage Media Are procedures in place to ensure that

all data storage media are purged of

all sensitive data prior to disposal?

Y ITP-02-02 Information Security —

Applications and Data Security

ESM: 04.001.001 Information

Management

R 7.2

Redeployment Are procedures in place to ensure that

all data storage media are at least

erased of all sensitive data prior to

redeployment? ...