Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

1. Objective

...

2.3. Transfer of equipment to the Office of Equipment Management for disposal, surplus or redeployment must include a certification that the media has been appropriately sanitized.

3. Procedures

The following media transfers are common at the University and each entails different sanitization methods. 

...

  • Risk: Media with data is leaving control of the University; media is accessible to laboratory attack. Last Updated May 16, 2011 
  • Minimum action: Unless vendor has a contractual agreement to maintain data security, media should be degaussed before returning to vendor. Note: Degaussing of hard disks will almost certainly render the standard warranty invalid , unless a “retain your media” option has been purchased. 

...

Resources for Media Sanitization

httphttps://cmrr.ucsd.edu/people/Hughes/DataSanitizationTutorial_files/data-sanitization-tutorial.pdf

http://ata.wiki.kernel.org/index.php/ATA_Secure_Erase

...

UCSD ATA Secure Erase Utility, httphttps://cmrr.ucsd.edu/hughesresources/subpgsetsecure-erase.htmhtml. Be sure that the proper ATA protocol has been implemented by the manufacturer.

...

East-Tec’s DisposeSecure, https://www.east-tec.com/disposesecure/

East-Tec Sanitizer, http://east-tec.com/sanitizer/index.htm

East-Tec Eraser,http https://www.east-tec.com/eraser/index.htm

Heidi’s Eraser, http://www.heidi.ie/eraser/ 

...

BC Wipe, http://www.jetico.com/download.htm

Burn 2.5,http https://www.securemac.com/burn.phpsoftware/staticusers-net-burn-2-5

DiskWipe, http://www.dtidata.com/products_disk_wipe.asp

...

Due to the manner in which data is written to solid state drives (SSD), a process that makes extensive use of randomization, tools that are effective in erasing fixed media will meet with varying degrees of success when used on SSDs. Given that, a an SSD would require a highly sophisticated “laboratory attack” to recover lost data. All but the most sensitive data can be considered effectively erased using fixed media overwrite tools. To absolutely guarantee nonrecovery, the drive should be physically destroyed.

...

Cross-cut shredding, or other means of physical destruction. AIX, SGI, SANS, NAS and tape drives Use tools recommended by the manufacturer.

Published Materials

...