Additional criteria for the confidentiality category: identifying and protecting confidential information and disposing of it when it is no longer needed.
Identifying confidential information and protecting it while it is retained, in line with the organization's confidentiality commitments: classification, handling and protection from destruction.
Disposing of confidential information in line with confidentiality commitments: identifying what is due for destruction and destroying it. Paired with CC6.5, which covers disposal of physical assets.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.