Educause Security Discussion mailing list archives

Re: HD destruction


From: Matthew Keller <kellermg () POTSDAM EDU>
Date: Thu, 15 Mar 2007 09:47:59 -0400

We use DBAN: http://dban.sourceforge.net/ which is the open-source
version of EBAN: http://www.techwayservices.com/eban-data-destruction/
which fulfills DoD 5220.

The only real difference between the two, is that with EBAN they
warranty all of the certifications, and with DBAN they do not.
Algorithmically identical.

If your concern is protecting personal, private and sensitive
information, certification-level scrubbing is sufficient. If you are
housing National Security Documents or other similar data, then a
physical disk shredder or incinerator is your best bet.


On Thu, 2007-03-15 at 09:23 -0400, Ray Bruder wrote:
    We currently use an outside vendor to destroy our hard drives and
receive a document of certification this work has been completed.    Does
anyone simply have the HD's scrubbed and receive a certified doc and feel
this is sufficient?  I was led to believe in the past that you can still
recover data from scrubbed drives.


--
Matthew Keller
Information Security Officer/Network Administrator
Computing & Technology Services
State University of New York @ Potsdam
Potsdam, NY, USA
http://mattwork.potsdam.edu/

Current thread: