{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"privacy","domain":["Data Protection & Privacy","Asset Management & Inventory"],"inherent_rating":"medium","taxonomy":["iso-27005-threat","iso-27005-vulnerability","nist-800-30-threat-event"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Adata-residual-media-disposal","description":"Retrieval of recycled or discarded media, and disposal/reuse of storage without proper erasure, exposes residual sensitive information; also insecure/incomplete data deletion in multi-tenant/cloud environments.","details":{"category":"privacy","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"data-residual-media-disposal","taxonomies":["iso-27005-threat","iso-27005-vulnerability","nist-800-30-threat-event"],"treatment":"mitigate"},"id":"risk:data-residual-media-disposal","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Adata-residual-media-disposal","sourceIds":["iso-27001","nist-800-53","nist-csf-2","pci-dss","soc2"],"sourceUrl":null,"title":"Residual data on improperly disposed or re-used media","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1b2737972642d38c22017c0d989ded07cce70c5b3b2852d363f78b49ce6fb84b","properties":{"rationale":"Sanitizing/destroying media before disposal or reuse and verifying unrecoverability directly prevents residual-data exposure.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-04-347e095f.json","sourceId":"uc:UC-ASSET-04","targetDetailPath":"/data/v1/records/risk-data-residual-media-disposal-92de3d1d.json","targetId":"risk:data-residual-media-disposal","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:220b5357db87b7b0a6912103add757a15531d388cee3f00ea90147bb3005e4f0","properties":{"rationale":"Sanitizing media to its highest classification before downgrade/reuse/release directly prevents residual-data exposure on re-used media.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-data-10-e7ad28aa.json","sourceId":"uc:UC-DATA-10","targetDetailPath":"/data/v1/records/risk-data-residual-media-disposal-92de3d1d.json","targetId":"risk:data-residual-media-disposal","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:23c9f00c486336bf33a43a03852482c4d0114e4d6a808dbb0c0a7f77120de34e","properties":{"rationale":"Marking media by classification drives correct secure-disposal handling of sensitive media before release.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-03-3e6216cd.json","sourceId":"uc:UC-ASSET-03","targetDetailPath":"/data/v1/records/risk-data-residual-media-disposal-92de3d1d.json","targetId":"risk:data-residual-media-disposal","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3acd682ded27c4cd1e08c07c21dc286da54ee2b3ddaa76e98e620e9c7c257af0","properties":{"rationale":"Irreversible destruction preventing reconstruction wherever data resides, including external services, directly eliminates residual data on disposed/reused storage.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-data-09-f83a01a3.json","sourceId":"uc:UC-DATA-09","targetDetailPath":"/data/v1/records/risk-data-residual-media-disposal-92de3d1d.json","targetId":"risk:data-residual-media-disposal","type":"mitigates"}],"schemaVersion":1}