Question DATA-20
Does the process described in DATA-19 adhere to DoD 5220.22-M and/or NIST SP 800-88 standards?
| Weight | 20 |
| High Risk | No |
| Required | Yes |
| Compliant Answer | Yes |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
State plans to adhere to DoD 5220.22-M and/or NIST SP 800-88 standards.
Answering "YES"
EDUCAUSE provides no guidance here
Reason for Question
Managing media (and the data within) throughout its lifecycle is crucial to the protection of institutional data. The focus of this question is confidentiality, ensuring that media that may store institutional data is protected by well-established policy and procedure.
Follow-Up Inquiries
Follow-up inquiries for DoD 5220.22-M and/or SP800-88 standards will be institution specific.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]