Educause Security Discussion mailing list archives

Re: hard drive destruction


From: "Barnes, Jeff" <jeffery () UCLA EDU>
Date: Thu, 10 Aug 2006 11:19:22 -0700

We now get Dells Keep your Hard drive.  
If we have a machine that we need to return a bad drive from it goes
back really bad as we run it thru the degausser first.
 
Jeff

________________________________

From: Michael Fox [mailto:Mfox () GEORGIASOUTHERN EDU] 
Sent: Thursday, August 10, 2006 7:45 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] hard drive destruction


I am working on policy and procedures for hard drive wipe/destruction. I
have most of what I need for my procedures but I have hit one sticking
point. I would like to get some input as to how others have handled this
issue. 
 
The issue: if a hard drive that is under warranty fails most technicians
will contact the vendor, get a replacement drive and send the "bad"
drive back to the vendor. If there is sensitive information on that
drive (worst case scenario always) the vendor now has access to that
data and/or worse yet they repair the drive and sell it to someone else.
 
 What do you folks do with this kind of scenario?
 
Any information will be a great help.
 
Thanks in advance,
Mike
 
 
Mike Fox
Georgia Southern University
Information Technology Services
Office of Information Security
mfox () georgiasouthern edu
(912)871-1592

Jeremiah 29:11-16
 
NOTE: This email message is intended only for the named recipient(s)
above
and may contain information that is privileged, confidential, and or
exempt
from disclosure under applicable law. If you have received this message
in
error, or are not the named recipient(s), please immediately contact the
sender and delete this email message.


Current thread: