MP-06(03) Nondestructive Techniques
All changes in this version
Title
Nondestructive Techniques
Control
Apply nondestructive sanitization techniques to portable storage devices prior to connecting such devices to the system under the following circumstances: [Assignment: circumstances].
Discussion
Portable storage devices include external or removable hard disk drives (e.g., solid state, magnetic), optical discs, magnetic or optical tapes, flash memory devices, flash memory cards, and other external or removable disks. Portable storage devices can be obtained from untrustworthy sources and contain malicious code that can be inserted into or transferred to organizational systems through USB ports or other entry portals. While scanning storage devices is recommended, sanitization provides additional assurance that such devices are free of malicious code. Organizations consider nondestructive sanitization of portable storage devices when the devices are purchased from manufacturers or vendors prior to initial use or when organizations cannot maintain a positive chain of custody for the devices.
Parameters
mp-06.03_odp: circumstances
Assessment objective
MP-06(03) non-destructive sanitization techniques are applied to portable storage devices prior to connecting such devices to the system under [Assignment: circumstances].
STIG rules that implement this control 4
Apple iOS/iPadOS 26 V1R3
- AIOS-26-009900 CAT II Apple iOS/iPadOS 26 must be configured to [selection: wipe protected data, wipe sensitive data] upon unenrollment from MDM.
- AIOS-26-010000 CAT II Apple iOS/iPadOS 26 must be configured to [selection: remove Enterprise applications, remove all noncore applications (any nonfactory-installed application)] upon unenrollment from MDM.
- AIOS-26-015100 CAT II Apple iOS/iPadOS 26 must delete eSIM content when the device is erased.
Apple iOS/iPadOS 27 V1R1
- AIOS-27-013700 CAT II Apple iOS/iPadOS 27 must delete eSIM content when the device is erased.