The Security Risk Assessment Handbook, 2nd Edition

Administrative Data Gathering  ◾  205

© 2011 by Taylor & Francis Group, LLC

approaches for TRASHINT (short for Trash Intelligence) and sanitization testing

methods below should be considered.

6.2.5.2.1 Approach 1: TRASHINT

is approach involves a simple test of the disposal and destruction procedures

for sensitive information. e security risk assessment team should be familiar

with the information-labeling and sensitive information and media disposal and

Table6.21  Administrative Controls Observation Guideline (Continued)

Administrative

Control Claim Observation Test or Procedure Check

Hiring and

termination

References are

checked for all

employees ...