Which of the following must be covered by the standards in media sanitization?

Media sanitization involves processes that protect sensitive data when storage devices are no longer in use. The primary focus is on ensuring that data cannot be retrieved by unauthorized individuals after the data has been deleted or the storage device is disposed of.

Protection against unauthorized access is a critical component of this process because, if data is not adequately protected, it may be recoverable even after attempts to sanitize the media. This aspect underscores the importance of applying methods for media sanitization that guarantee data is irretrievable, thus preventing unauthorized access.

The other options relate to important aspects of information security but do not directly refer to the standards in media sanitization. For example, data retrieval procedures might detail how to access data securely, and cloud storage configurations might pertain to the setup of cloud services for security and compliance. However, they do not specifically address the requirements for ensuring that once data is sanitized, it remains inaccessible, which is the core principle of the standards governing media sanitization.