NIST SP 800-88 Rev 2
Appendices B and C: device-specific characteristics to obtain from vendors and the sample certificate of sanitization – NIST SP 800-88 Rev 2

NIST SP 800-88 Rev 2 B: Obtain from ISM vendors the media type and coercivity, each supported sanitize command with the areas it does not address, its expected duration and any validation results, and its conformance to IEEE 2883, and verify command behaviour rather than trusting the name

What does B require?

Vendors implement many ISM types on the same standardised interface command sets, so the same sanitize commands may work across vendors, but no assumption is made about what a command does: the same name on two interfaces can perform very different operations, and a command name may imply a capability that does not meet the minimum for the method, so functionality is verified. Vendor implementations of CE or block erase can be hard for users to see into. To support informed decisions, including purchasing, vendors are asked how a device implements each dedicated sanitize command and whether it conforms to standards such as IEEE 2883, reporting the media type (conventional, heat-assisted or shingled magnetic recording, flash, hybrid) and the coercivity of any magnetic media, and for each supported sanitize command the areas it does not address, the estimated time to complete and the results of any validation testing.

Maintained by Gerard Blokdyk

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.