MP-06(07) Dual Authorization
All changes in this version
Title
Dual Authorization
Control
Enforce dual authorization for the sanitization of [Assignment: system media].
Discussion
Organizations employ dual authorization to help ensure that system media sanitization cannot occur unless two technically qualified individuals conduct the designated task. Individuals who sanitize system media possess sufficient skills and expertise to determine if the proposed sanitization reflects applicable federal and organizational standards, policies, and procedures. Dual authorization also helps to ensure that sanitization occurs as intended, protecting against errors and false claims of having performed the sanitization actions. Dual authorization may also be known as two-person control. To reduce the risk of collusion, organizations consider rotating dual authorization duties to other individuals.
Parameters
mp-06.07_odp: system media
Related controls
ac-3, mp-2
Assessment objective
MP-06(07) dual authorization for sanitization of [Assignment: system media] is enforced.
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).