Example, read only. A sample account that shows what finished CMMC looks like.
Safeguard 7 of 15 · MP.L1-b.1.vii
MP.L1-3.8.3 · FAR 52.204-21 (b)(1)(vii) · NIST SP 800-171 3.8.3
Media Disposal
Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse
What it means
When you throw out or reuse a computer, phone, USB drive, or paper file, wipe it or destroy it so the next person can't read what was on it.
Why it matters
Selling an old laptop on eBay without wiping it is the textbook CMMC failure. A written disposal procedure plus a running log is one of the cheapest controls to get right.
How to do it, Microsoft 365 / Intune
- 1Go to Intune / Endpoint Manager → Devices → retired or wiped devices
- 2Screenshot the wipe history for any retired device that handled FCI
Capture: Screenshot of Intune retire/wipe history for decommissioned devices.
The proof on file
- media-disposal-register.pdfReviewed, sufficient
Every file is checked by Charlie the moment it is uploaded, so a gap is caught on the spot, not at the assessment.
The narrative on file
Old drives and USB media are wiped or physically destroyed before disposal, logged on the media disposal register. Paper drawings and travelers tied to federal jobs are shredded on site. No federal media leaves the building intact.
You answer in plain English; Charlie writes the official narrative for your System Security Plan.
What makes it pass
- A written sanitization procedure covers each media type: laptops, phones, USBs, drives, paper
- The disposal log has at least one recent entry with: date, item, serial, method, performer, witness
- Owner signature on the procedure
- For Intune path: device retire/wipe history visible
Assessment objectives, NIST SP 800-171A
This is one of 15
Answer in plain English, drop the proof, confirm it MET.
Cedar Ridge Machine Works, LLC walked all 15 the same way. The platform explains each one in plain English, tells you exactly what to grab, checks it, and writes the paperwork, and you confirm each one MET. The self assessment stays your act. Start free, or book a call.