28. A company is discarding a classified storage array and hires an outside vendor to complete the disposal. Which of the following should the company request from the vendor?
Answer: A
Certification
It is essential for the company to request certification from the vendor to ensure that the disposal of the classified storage array is conducted according to relevant regulations and standards. This certification acts as proof that the vendor has followed proper procedures for securely handling and disposing of sensitive information.
A) Certification
Certification is the correct choice as it validates that the vendor has adhered to required protocols for the secure disposal of classified materials. This documentation provides assurance that any data contained in the storage array has been properly destroyed, mitigating the risk of data breaches.
B) Inventory list
While an inventory list could provide details about the items being disposed of, it does not guarantee that the disposal process meets security standards. Thus, an inventory list alone is insufficient for ensuring the secure handling of classified information.
C) Classification
Requesting classification is not relevant in this context, as the storage array is already classified. The company needs to ensure proper disposal methods rather than reassessing the classification of the data.
D) Proof of ownership
Proof of ownership may be necessary in some contexts, but it does not address the critical aspect of ensuring that the classified data is securely disposed of. Without certification, proof of ownership does not guarantee compliance with disposal regulations.
Conclusion
Certification is vital for confirming that the vendor follows proper procedures for disposing of classified materials, thereby protecting sensitive information. The other options, while potentially useful in different contexts, do not provide the same assurance of security and compliance. Therefore, requesting certification is the most prudent action for the company in this situation.