Re: Equipment Disposition - Disk Drive "Sanitization"

[Brian Eckman <eckman () UMN EDU>]

Sadler, Connie wrote:
> Can others share what they are doing with regard to ensuring that
> information is properly overwritten before a computer is transferred or
> disposed of?
>
> We have an agreement with a third party to destroy all drives that are
> disposed of - and we also have a form that is filled out when systems
> are transferred or "gifted". But we need to tighten this up. I'd like
> each department to take responsibility for this and sign off on the form
> in such a way that they are accountable for information that gets past
> the process. But there is pushback on this (surprise!).
>
> Do others have processes that work well for them?

(UW - if you are listening, pardon me for speaking for you.)

I *really* like the University of Washington's procedures[1]. They also
have developed their own GNU-licensed tool[2] to clean the hard drives.


[1] http://www.washington.edu/admin/surplus/computer.html
[2] http://staff.washington.edu/jdlarios/autoclave/

Brian
--
Brian Eckman
Security Analyst
OIT Security and Assurance
University of Minnesota


"There are 10 types of people in this world. Those who
understand binary and those who don't."

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.