NIST 800-53 REV 5 • MEDIA PROTECTION
MP-8(4) — Classified Information
Downgrade system media containing classified information prior to release to individuals without required access authorizations.
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Supplemental Guidance
Downgrading of classified information uses approved sanitization tools, techniques, and procedures to transfer information confirmed to be unclassified from classified systems to unclassified media.
Practitioner Notes
Classified media requires approved downgrading procedures before it can be released to individuals without the required clearances. This is governed by classification guides and cognizant security agency requirements.
Example 1: Follow your cognizant security agency's approved procedures for downgrading classified media. This typically involves NSA-approved sanitization methods, verification by a trained professional, and written authorization from your security officer or classification authority.
Example 2: Maintain a classified media downgrading log reviewed by your FSO. Each entry must include: the original classification, downgrade authorization reference, sanitization method used, verification results, the authorizing official's signature, and the new classification marking applied to the media.