SIG Lite
Control DSP-05
Extractive Review Standard
How to answer 'What is your procedure for secure data disposal and media sanitization?' on a SIG Lite
Reviewer Guidance & Pitfalls
Explain crypto-shredding (destroying tenant encryption keys) and cloud provider compliance with NIST SP 800-88 Rev 1 for underlying storage media decommissioning.
Example Answer Passing Enterprise Audit
Compliant Response Template
Tenant data deletion executes cryptographic key destruction (crypto-shredding) alongside cascading database record deletion; physical drive sanitization adheres to NIST SP 800-88 via AWS compliance (SOC 2, CC6.5).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
Zero spam. 100% confidential. No credit card required.