Educause Security Discussion mailing list archives

Re: Quick Survey: How do you "dispose" of outbound hard drives??


From: "John C. Gale" <john_gale () UNCG EDU>
Date: Mon, 27 Sep 2010 09:29:34 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Our procedures require the following (in this order of preference):

(1) destroy (physically crushed by a machine)
(2) purge (degauss... great for old backup tapes)
(3) clear (overwrite to NISPOM DoD 5220.22-M standard)

This applies to any computing media (hard drives from anything [copies,
pcs, servers, etc], tapes, usb, whatever).

We need to update our procedure for solid state devices.  I haven't
researched applicable options yet.  Right now we only have the destroy
option for those.

Cheers

John

On 09/27/2010 12:27 AM, SCHALIP, MICHAEL wrote:
Hi Folks....

We're looking for efficiencies (who isn't?) - What process do you
follow to securely dispose of old hard drives?  Do you sanitize
them?...what process/software do you use?  Do you allow them to be
sold/donated?  Do you grind/shred them?  Do you degauss them?

We are sanitizing them, but we're wondering if it would just be
cheaper to use a secure recycling service?  (I know DOE/DOD does some
of that....depending on the "level"....)

Looking forward to hearing what everyone is doing....

Thanks,

Michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkygnDoACgkQu0CHnE2bx8480gCcDgShYljLZunSrfJTXvYMX+6Z
yAYAnRo0BN42uHKNiPMS3lnX9PgRpLyy
=vD8H
-----END PGP SIGNATURE-----


Current thread: