CC6.5
Discontinues physical protections after use
SecurityImplementedSecurity (Common Criteria)
Control description
AICPA Trust Services Criteria
The entity discontinues logical and physical protections over physical assets only after the ability to read or recover data and software has been diminished and is no longer required.
Auditor test plan
How this is tested during the audit
Auditor reviews the laptop disposal log and certificates of destruction from the e-waste vendor.
Evidence
No evidence on file yet
No evidence attached
Upload at least one artifact before the audit window opens.
Last reviewed
95d
Within 180-day window
Evidence on file
2
Owner
VE
VP Engineering
Accountable for design + operating effectiveness
Status timeline
Recent control history
Last reviewed by VP Engineering
95d ago
Status set to implemented
125d ago
Initial control design approved
185d ago