Educause Security Discussion mailing list archives

Re: Equipment Disposition - Disk Drive "Sanitization"


From: Theresa M Rowe <rowe () OAKLAND EDU>
Date: Wed, 25 Feb 2004 13:12:12 -0500

Our sysadmins use these tools for servers and special IT
systems.
Theresa

---- Original message ----
Date: Wed, 25 Feb 2004 11:35:53 -0600
From: Brian Eckman <eckman () UMN EDU>
Subject: Re: [SECURITY] Equipment Disposition - Disk
Drive "Sanitization"
To: SECURITY () LISTSERV EDUCAUSE EDU

Sadler, Connie wrote:
Can others share what they are doing with regard to
ensuring that
information is properly overwritten before a computer is
transferred or
disposed of?

We have an agreement with a third party to destroy all
drives that are
disposed of - and we also have a form that is filled out
when systems
are transferred or "gifted". But we need to tighten this
up. I'd like
each department to take responsibility for this and sign
off on the form
in such a way that they are accountable for information
that gets past
the process. But there is pushback on this (surprise!).

Do others have processes that work well for them?

(UW - if you are listening, pardon me for speaking for you.)

I *really* like the University of Washington's procedures
[1]. They also
have developed their own GNU-licensed tool[2] to clean the
hard drives.


[1] http://www.washington.edu/admin/surplus/computer.html
[2] http://staff.washington.edu/jdlarios/autoclave/

Brian
--
Brian Eckman
Security Analyst
OIT Security and Assurance
University of Minnesota


"There are 10 types of people in this world. Those who
understand binary and those who don't."

**********
Participation and subscription information for this EDUCAUSE
Discussion Group discussion list can be found at
http://www.educause.edu/cg/.
Theresa Rowe
Assistant Vice President
University Technology Services
www.oakland.edu/uts - the latest news from University Technology Services

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: