After sanitization a certificate of sanitization (Appendix C gives a sample) is completed for each sanitized ISM in line with policy, as a paper or electronic record; bar-coded labels and tracking applications can automate it, which matters where physical access to the ISM is difficult. A complete certificate records at least the manufacturer, model, serial number, any organisationally assigned media or property number, media type (hard copy or ISM), media source, optionally the pre-sanitization confidentiality category, the sanitization method, the technique (for example degauss, overwrite, block erase, CE), the tool used with its version, the verification method, and for the individuals performing verification and validation their name, position, date, location, contact details and signature. Where validation succeeds and the ISM now carries a lower confidentiality level, all markings showing the previous level are removed. The value of the certification depends on handling across the ISM life cycle: records are kept when the ISM enters the environment, when it leaves its last place of use and when it reaches its post-sanitization destination, otherwise the records show only that particular ISM were sanitized, not that every ISM introduced is being sanitized.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.