Administrative controls researchNIST defines media sanitization as making access to target data infeasible for a given level of effortA risk-based retirement record for data discovery, account removal, media sanitization, vendor handoff, recycling, and verified disposal.
Administrative controls researchThe FTC recommends restricting sensitive information to employees who need it and planning an immediate response to security incidentsA least-privilege response record for reporting, disabling, replacing, investigating, and verifying lost keys, badges, fobs, and mobile credentials.
Administrative controls researchFTC consumer guidance recommends keeping the written warranty and purchase receipt together as evidence of coverage and purchase dateAn evidence-based register for equipment identity, warranty terms, defect reports, service events, claim decisions, downtime, and verified closure.
Administrative controls researchThe FTC recommends limiting access to sensitive information and securely disposing of information that is no longer neededAn evidence-based renewal register for owners, usage, access, data, terms, price changes, approval, cancellation, and verified billing.
Administrative controls researchCISA notes that vendor risk begins when a business grants physical or logical accessA least-privilege review for granting, verifying, changing, and removing third-party access to fitness business systems.