data security end of life
DESCRIPTION
Andy Crawford [email protected]. Data Security End of life. 263,470,869. Protecting Data. Before, During and After. Where is End of Life Data Contained?. Electronic Media Types and Forms Optical Discs (CD / DVD) Hard Disc Drives (HDD) Magnetic Tape Floppy Discs Flash Memory. - PowerPoint PPT PresentationTRANSCRIPT
DATA SECURITYEND OF LIFE
Andy Crawfordacrawforddestructdatacom
042023 1Florida Gulf Coast ARMA Chapter
263470869
042023 2Florida Gulf Coast ARMA Chapter
Protecting Data
Before During and After
042023 3Florida Gulf Coast ARMA Chapter
Where is End of Life Data Contained
bull Electronic Media Types and Formsndash Optical Discs (CD DVD)ndash Hard Disc Drives (HDD)ndash Magnetic Tapendash Floppy Discsndash Flash Memory
042023 Florida Gulf Coast ARMA Chapter 4
How much is a Megabyte
042023 Florida Gulf Coast ARMA Chapter 5
bull 8 bits equals 1 Byte bull1024 bytes equal 1 Kilobytes bull1024 Kilobytes equals 1 Megabytebull 1024 Megabytes equals 1 Gigabytesbull 1024 Gigabytes equals 1 Terabyte
CDrsquos and DVDrsquos
042023 Florida Gulf Coast ARMA Chapter 6
bull CD-ROMs are capable of holding up to 300000 pages of data on a single disc (870 MB)
bull 5000 sheets of paper equals 1 box of paperbull This equates to 60 Boxes of Data
bull DVDrsquos are capable of holding up to 2000000 pages of data on a single disc (47 GB)
bull 40 Cartons equals 1 pallet of paperbull This equates to 10 pallets of paperbull Half a Semi-Trailer full of information
Hard Disc Drives
bull Range in size and new technology has made it possible to have a 3000 GB Hard Disc Drive
bull 60 GB Hard Drive is pretty typicalbull 60 GB equals over 25 million pieces of paper
ndash 1 Truck equals 800 cartons of paperbull This equates to 64 Semi-Trucks full of paper
042023 Florida Gulf Coast ARMA Chapter 7
Magnetic Tape
bull In 2007 IBM and Fujifilm were close to releasing an 8 Terabyte Magnetic Tape Reelndash This Equates to over 34 billion sheets of paperndash 870 Semi Trucks full of data
042023 Florida Gulf Coast ARMA Chapter 8
Floppy Discs
bull Could hold up to 1 Megabyte of informationndash Not used much anymorendash 1 Floppy Disc would hold up to 415 pages of
informationndash Less than one Ream of paper
bull 1 Ream equals 500 sheets of paper
042023 Florida Gulf Coast ARMA Chapter 9
Flash Drives
bull Sizes range from 512000 MB to 4 GBndash A 4 GB Flash Drive is capable of holding up to
1700000 sheets of information ndash This equates to 340 boxes of paper
042023 Florida Gulf Coast ARMA Chapter 10
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
263470869
042023 2Florida Gulf Coast ARMA Chapter
Protecting Data
Before During and After
042023 3Florida Gulf Coast ARMA Chapter
Where is End of Life Data Contained
bull Electronic Media Types and Formsndash Optical Discs (CD DVD)ndash Hard Disc Drives (HDD)ndash Magnetic Tapendash Floppy Discsndash Flash Memory
042023 Florida Gulf Coast ARMA Chapter 4
How much is a Megabyte
042023 Florida Gulf Coast ARMA Chapter 5
bull 8 bits equals 1 Byte bull1024 bytes equal 1 Kilobytes bull1024 Kilobytes equals 1 Megabytebull 1024 Megabytes equals 1 Gigabytesbull 1024 Gigabytes equals 1 Terabyte
CDrsquos and DVDrsquos
042023 Florida Gulf Coast ARMA Chapter 6
bull CD-ROMs are capable of holding up to 300000 pages of data on a single disc (870 MB)
bull 5000 sheets of paper equals 1 box of paperbull This equates to 60 Boxes of Data
bull DVDrsquos are capable of holding up to 2000000 pages of data on a single disc (47 GB)
bull 40 Cartons equals 1 pallet of paperbull This equates to 10 pallets of paperbull Half a Semi-Trailer full of information
Hard Disc Drives
bull Range in size and new technology has made it possible to have a 3000 GB Hard Disc Drive
bull 60 GB Hard Drive is pretty typicalbull 60 GB equals over 25 million pieces of paper
ndash 1 Truck equals 800 cartons of paperbull This equates to 64 Semi-Trucks full of paper
042023 Florida Gulf Coast ARMA Chapter 7
Magnetic Tape
bull In 2007 IBM and Fujifilm were close to releasing an 8 Terabyte Magnetic Tape Reelndash This Equates to over 34 billion sheets of paperndash 870 Semi Trucks full of data
042023 Florida Gulf Coast ARMA Chapter 8
Floppy Discs
bull Could hold up to 1 Megabyte of informationndash Not used much anymorendash 1 Floppy Disc would hold up to 415 pages of
informationndash Less than one Ream of paper
bull 1 Ream equals 500 sheets of paper
042023 Florida Gulf Coast ARMA Chapter 9
Flash Drives
bull Sizes range from 512000 MB to 4 GBndash A 4 GB Flash Drive is capable of holding up to
1700000 sheets of information ndash This equates to 340 boxes of paper
042023 Florida Gulf Coast ARMA Chapter 10
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Protecting Data
Before During and After
042023 3Florida Gulf Coast ARMA Chapter
Where is End of Life Data Contained
bull Electronic Media Types and Formsndash Optical Discs (CD DVD)ndash Hard Disc Drives (HDD)ndash Magnetic Tapendash Floppy Discsndash Flash Memory
042023 Florida Gulf Coast ARMA Chapter 4
How much is a Megabyte
042023 Florida Gulf Coast ARMA Chapter 5
bull 8 bits equals 1 Byte bull1024 bytes equal 1 Kilobytes bull1024 Kilobytes equals 1 Megabytebull 1024 Megabytes equals 1 Gigabytesbull 1024 Gigabytes equals 1 Terabyte
CDrsquos and DVDrsquos
042023 Florida Gulf Coast ARMA Chapter 6
bull CD-ROMs are capable of holding up to 300000 pages of data on a single disc (870 MB)
bull 5000 sheets of paper equals 1 box of paperbull This equates to 60 Boxes of Data
bull DVDrsquos are capable of holding up to 2000000 pages of data on a single disc (47 GB)
bull 40 Cartons equals 1 pallet of paperbull This equates to 10 pallets of paperbull Half a Semi-Trailer full of information
Hard Disc Drives
bull Range in size and new technology has made it possible to have a 3000 GB Hard Disc Drive
bull 60 GB Hard Drive is pretty typicalbull 60 GB equals over 25 million pieces of paper
ndash 1 Truck equals 800 cartons of paperbull This equates to 64 Semi-Trucks full of paper
042023 Florida Gulf Coast ARMA Chapter 7
Magnetic Tape
bull In 2007 IBM and Fujifilm were close to releasing an 8 Terabyte Magnetic Tape Reelndash This Equates to over 34 billion sheets of paperndash 870 Semi Trucks full of data
042023 Florida Gulf Coast ARMA Chapter 8
Floppy Discs
bull Could hold up to 1 Megabyte of informationndash Not used much anymorendash 1 Floppy Disc would hold up to 415 pages of
informationndash Less than one Ream of paper
bull 1 Ream equals 500 sheets of paper
042023 Florida Gulf Coast ARMA Chapter 9
Flash Drives
bull Sizes range from 512000 MB to 4 GBndash A 4 GB Flash Drive is capable of holding up to
1700000 sheets of information ndash This equates to 340 boxes of paper
042023 Florida Gulf Coast ARMA Chapter 10
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Where is End of Life Data Contained
bull Electronic Media Types and Formsndash Optical Discs (CD DVD)ndash Hard Disc Drives (HDD)ndash Magnetic Tapendash Floppy Discsndash Flash Memory
042023 Florida Gulf Coast ARMA Chapter 4
How much is a Megabyte
042023 Florida Gulf Coast ARMA Chapter 5
bull 8 bits equals 1 Byte bull1024 bytes equal 1 Kilobytes bull1024 Kilobytes equals 1 Megabytebull 1024 Megabytes equals 1 Gigabytesbull 1024 Gigabytes equals 1 Terabyte
CDrsquos and DVDrsquos
042023 Florida Gulf Coast ARMA Chapter 6
bull CD-ROMs are capable of holding up to 300000 pages of data on a single disc (870 MB)
bull 5000 sheets of paper equals 1 box of paperbull This equates to 60 Boxes of Data
bull DVDrsquos are capable of holding up to 2000000 pages of data on a single disc (47 GB)
bull 40 Cartons equals 1 pallet of paperbull This equates to 10 pallets of paperbull Half a Semi-Trailer full of information
Hard Disc Drives
bull Range in size and new technology has made it possible to have a 3000 GB Hard Disc Drive
bull 60 GB Hard Drive is pretty typicalbull 60 GB equals over 25 million pieces of paper
ndash 1 Truck equals 800 cartons of paperbull This equates to 64 Semi-Trucks full of paper
042023 Florida Gulf Coast ARMA Chapter 7
Magnetic Tape
bull In 2007 IBM and Fujifilm were close to releasing an 8 Terabyte Magnetic Tape Reelndash This Equates to over 34 billion sheets of paperndash 870 Semi Trucks full of data
042023 Florida Gulf Coast ARMA Chapter 8
Floppy Discs
bull Could hold up to 1 Megabyte of informationndash Not used much anymorendash 1 Floppy Disc would hold up to 415 pages of
informationndash Less than one Ream of paper
bull 1 Ream equals 500 sheets of paper
042023 Florida Gulf Coast ARMA Chapter 9
Flash Drives
bull Sizes range from 512000 MB to 4 GBndash A 4 GB Flash Drive is capable of holding up to
1700000 sheets of information ndash This equates to 340 boxes of paper
042023 Florida Gulf Coast ARMA Chapter 10
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
How much is a Megabyte
042023 Florida Gulf Coast ARMA Chapter 5
bull 8 bits equals 1 Byte bull1024 bytes equal 1 Kilobytes bull1024 Kilobytes equals 1 Megabytebull 1024 Megabytes equals 1 Gigabytesbull 1024 Gigabytes equals 1 Terabyte
CDrsquos and DVDrsquos
042023 Florida Gulf Coast ARMA Chapter 6
bull CD-ROMs are capable of holding up to 300000 pages of data on a single disc (870 MB)
bull 5000 sheets of paper equals 1 box of paperbull This equates to 60 Boxes of Data
bull DVDrsquos are capable of holding up to 2000000 pages of data on a single disc (47 GB)
bull 40 Cartons equals 1 pallet of paperbull This equates to 10 pallets of paperbull Half a Semi-Trailer full of information
Hard Disc Drives
bull Range in size and new technology has made it possible to have a 3000 GB Hard Disc Drive
bull 60 GB Hard Drive is pretty typicalbull 60 GB equals over 25 million pieces of paper
ndash 1 Truck equals 800 cartons of paperbull This equates to 64 Semi-Trucks full of paper
042023 Florida Gulf Coast ARMA Chapter 7
Magnetic Tape
bull In 2007 IBM and Fujifilm were close to releasing an 8 Terabyte Magnetic Tape Reelndash This Equates to over 34 billion sheets of paperndash 870 Semi Trucks full of data
042023 Florida Gulf Coast ARMA Chapter 8
Floppy Discs
bull Could hold up to 1 Megabyte of informationndash Not used much anymorendash 1 Floppy Disc would hold up to 415 pages of
informationndash Less than one Ream of paper
bull 1 Ream equals 500 sheets of paper
042023 Florida Gulf Coast ARMA Chapter 9
Flash Drives
bull Sizes range from 512000 MB to 4 GBndash A 4 GB Flash Drive is capable of holding up to
1700000 sheets of information ndash This equates to 340 boxes of paper
042023 Florida Gulf Coast ARMA Chapter 10
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
CDrsquos and DVDrsquos
042023 Florida Gulf Coast ARMA Chapter 6
bull CD-ROMs are capable of holding up to 300000 pages of data on a single disc (870 MB)
bull 5000 sheets of paper equals 1 box of paperbull This equates to 60 Boxes of Data
bull DVDrsquos are capable of holding up to 2000000 pages of data on a single disc (47 GB)
bull 40 Cartons equals 1 pallet of paperbull This equates to 10 pallets of paperbull Half a Semi-Trailer full of information
Hard Disc Drives
bull Range in size and new technology has made it possible to have a 3000 GB Hard Disc Drive
bull 60 GB Hard Drive is pretty typicalbull 60 GB equals over 25 million pieces of paper
ndash 1 Truck equals 800 cartons of paperbull This equates to 64 Semi-Trucks full of paper
042023 Florida Gulf Coast ARMA Chapter 7
Magnetic Tape
bull In 2007 IBM and Fujifilm were close to releasing an 8 Terabyte Magnetic Tape Reelndash This Equates to over 34 billion sheets of paperndash 870 Semi Trucks full of data
042023 Florida Gulf Coast ARMA Chapter 8
Floppy Discs
bull Could hold up to 1 Megabyte of informationndash Not used much anymorendash 1 Floppy Disc would hold up to 415 pages of
informationndash Less than one Ream of paper
bull 1 Ream equals 500 sheets of paper
042023 Florida Gulf Coast ARMA Chapter 9
Flash Drives
bull Sizes range from 512000 MB to 4 GBndash A 4 GB Flash Drive is capable of holding up to
1700000 sheets of information ndash This equates to 340 boxes of paper
042023 Florida Gulf Coast ARMA Chapter 10
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Hard Disc Drives
bull Range in size and new technology has made it possible to have a 3000 GB Hard Disc Drive
bull 60 GB Hard Drive is pretty typicalbull 60 GB equals over 25 million pieces of paper
ndash 1 Truck equals 800 cartons of paperbull This equates to 64 Semi-Trucks full of paper
042023 Florida Gulf Coast ARMA Chapter 7
Magnetic Tape
bull In 2007 IBM and Fujifilm were close to releasing an 8 Terabyte Magnetic Tape Reelndash This Equates to over 34 billion sheets of paperndash 870 Semi Trucks full of data
042023 Florida Gulf Coast ARMA Chapter 8
Floppy Discs
bull Could hold up to 1 Megabyte of informationndash Not used much anymorendash 1 Floppy Disc would hold up to 415 pages of
informationndash Less than one Ream of paper
bull 1 Ream equals 500 sheets of paper
042023 Florida Gulf Coast ARMA Chapter 9
Flash Drives
bull Sizes range from 512000 MB to 4 GBndash A 4 GB Flash Drive is capable of holding up to
1700000 sheets of information ndash This equates to 340 boxes of paper
042023 Florida Gulf Coast ARMA Chapter 10
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Magnetic Tape
bull In 2007 IBM and Fujifilm were close to releasing an 8 Terabyte Magnetic Tape Reelndash This Equates to over 34 billion sheets of paperndash 870 Semi Trucks full of data
042023 Florida Gulf Coast ARMA Chapter 8
Floppy Discs
bull Could hold up to 1 Megabyte of informationndash Not used much anymorendash 1 Floppy Disc would hold up to 415 pages of
informationndash Less than one Ream of paper
bull 1 Ream equals 500 sheets of paper
042023 Florida Gulf Coast ARMA Chapter 9
Flash Drives
bull Sizes range from 512000 MB to 4 GBndash A 4 GB Flash Drive is capable of holding up to
1700000 sheets of information ndash This equates to 340 boxes of paper
042023 Florida Gulf Coast ARMA Chapter 10
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Floppy Discs
bull Could hold up to 1 Megabyte of informationndash Not used much anymorendash 1 Floppy Disc would hold up to 415 pages of
informationndash Less than one Ream of paper
bull 1 Ream equals 500 sheets of paper
042023 Florida Gulf Coast ARMA Chapter 9
Flash Drives
bull Sizes range from 512000 MB to 4 GBndash A 4 GB Flash Drive is capable of holding up to
1700000 sheets of information ndash This equates to 340 boxes of paper
042023 Florida Gulf Coast ARMA Chapter 10
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Flash Drives
bull Sizes range from 512000 MB to 4 GBndash A 4 GB Flash Drive is capable of holding up to
1700000 sheets of information ndash This equates to 340 boxes of paper
042023 Florida Gulf Coast ARMA Chapter 10
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Economic Impactbull Economic Impact in 2008
ndash $665 Million ndash $202 per record lost
bull Increased by $64 per person since 2005bull 40 Increase
ndash Customer Churnbull Health Care
ndash 65
bull Financialndash 55
bull Consumers
ndash $640000 ndash 40 Hours
bull Highs of 200 Hours
042023 Florida Gulf Coast ARMA Chapter 11
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Regulatory Drivers ndash Penalty Matrix
Gramm Leach Bliley
Financial Service Modernization Act
Sarbanes OxleyPublic Company
Accounting Reform amp Investor Protection
Act
FACTAFair amp Accurate Credit
Transaction Act
HIPAAHealth Insurance
Portability Accountability Act
Directors and Officers (per violation)
$10000 $1 Million $50000
Institution(per violation) $100000 $5 Million $11000 $250000
Years in Prison5-12 20 1-10
FDIC InsuranceTerminated
Impact on Operations
Cease and Desist
042023 12Florida Gulf Coast ARMA Chapter
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Most Peoplersquos Idea
042023 13Florida Gulf Coast ARMA Chapter
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Data Security Life Cycle
042023 14Florida Gulf Coast ARMA Chapter
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Show me the moneyBillions of dollars spent protecting data in the first 4 stages
bull Firewallsbull Login Passwordsbull Encryption bull Special screensbull and morehellip
042023 15Florida Gulf Coast ARMA Chapter
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
End of Life
bull No figures on end of lifendash Significantly less
bull Moneybull Effort
bull Tuesdays and Thursdaysndash Pull hard drivendash Place in burn bagndash Hand to driver
042023 16Florida Gulf Coast ARMA Chapter
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Where do they all goFor every 10 Hard Drives that enter the markethellip
hellip7 Hard Drives are taken out of the market042023 17Florida Gulf Coast ARMA Chapter
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
End of Life Mythsbull Hard Drives
ndash Deleting Filesndash Reformattingndash Reinstalling Operating Systemndash Software Overwriting
042023 18Florida Gulf Coast ARMA Chapter
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
DoD 5220bull Software Overwriting
ndash DoD Wipendash 3 Passndash 7 Passndash Guttmanndash Free
bull What is it missingndash HPAndash DCOndash G-List
042023 19Florida Gulf Coast ARMA Chapter
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Degaussing and Secure Erasebull Degaussing
ndash How does it workndash eWastendash Verification ndash Audit Trail
bull Secure Erasendash What is itndash Who Invented itndash Verificationndash Audit Trail
042023 20Florida Gulf Coast ARMA Chapter
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
CD-Rom DVD Destruction
042023 Florida Gulf Coast ARMA Chapter 21
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
1 2 3 4 5
22
Digital Data DestructionDigital Data Destruction
Level of Tier DestructionLevel of Tier Destruction
FriendrsquosFriendrsquos Tel Tel
PatientPatientRecordsRecords
Thermal-NuclearThermal-NuclearLaunch CodesLaunch Codes
HighHigh
LowLow
HighHigh
LowLow
Cost toCost toReconstructReconstructValue Of DataValue Of Data
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Setting Policybull DoD 5220
ndash National Security Information Programndash NISPOM 5220ndash January 1995
bull 3 Passndash February 2006
bull Left up to CSAbull DoDbull CIAbull NSA
042023 23Florida Gulf Coast ARMA Chapter
This Manual cancels DoD 522022-S-1 ldquoCOMSEC Supplement to the Industrial Security Manual for Safeguarding Classified Informationrdquo August 1983
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
NIST 800-88
bull Covers all types of mediabull Good source for
informationndash Commercialndash Government
bull Clearndash Single pass ndash All addressable sectors
bull Purgendash Degaussndash FW Based solution (Secure Erase)
bull Physical Destructionndash Shred Pulverize
042023 24Florida Gulf Coast ARMA Chapter
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
NIST 800-88
Methods How
042023 25Florida Gulf Coast ARMA Chapter
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Hard Disc Drives
bull Recommendations amp Guidelines from NIST on Hard Drive Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 26
ATASATASCSI DriHDD- Media NIST SP-800-88 September 2006ves
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
(ATA Drives) Purge using Secure Erase The Secure Erase software can be download from the University of California San Diego (UCSD) CMRR sitePurge hard disk drives by either purging the hard disk drive in an NSACSS-approved automatic degausser or by disassembling the hard disk drive and purging the enclosed platters with an NSACSS-approved degaussing wand Degaussing any current generation hard disk will render the drive permanently unusable
1048707 Disintegrate 1048707 Shred 1048707 Pulverize 1048707 Incinerate Incinerate hard disk drives by burning the hard disk drives in a licensed incinerator
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash CD DVD Discs
042023 Florida Gulf Coast ARMA Chapter 27
bull Recommendations amp Guidelines from NIST on Optical Media Destructionndash HDD- Media NIST SP-800-88 September 2006
Optical Disks ndash CDDVD Media NIST SP-800-88 September 2006
See Physical Destruction
See Physical Destruction
Destroy in order of recommendations 11048707 Removing the Information bearing layers of CD media using a commercial optical disk grinding device 21048707 Incinerate optical disk media (reduce to ash) using a licensed facility 31048707 Use optical disk media shredders or disintegrator devices to reduce to particles that have a nominal edge dimensions of five millimeters (5 mm) and surface area of twenty-five square millimeters (25 mm2) This is a current acceptable particle size Any future disk media shredders obtained should reduce CD to surface area of 25mmsup2
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Magnetic Tapes
bull Recommendations and amp Guidelines from NIST on Tape Destruction ndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 28
Magnetic Tapes ndashNIST 800-88 September 2006
Clear magnetic tapes by either re-recording (overwriting) or degaussing Clearing a magnetic tape by re-recording (overwriting) may be impractical for most applications since the process occupies the tape transport for excessive time periods Clearing by Overwriting Overwriting should be performed on a system similar to the one that originally recorded the data For example overwrite previously recorded classified or sensitive VHS format video signals on a comparable VHS format recorder All portions of the magnetic tape should be overwritten one time with known non-sensitive signals
Degauss using an NSACSS-approved degausser Purging by Degaussing Purge the magnetic tape in any degausser that can purge the signal enough to prohibit playback of the previous known signal Purging by degaussing can be accomplished easier by using an NSACSS-approved degausser for the magnetic tape
1048707 Incinerate by burning the tapes in a licensed incinerator 1048707 Shred Preparatory steps such as removing the tape from the reel or cassette prior to destruction are unnecessary However segregation of components (tape and reels or cassettes) may be necessary to comply with the requirements of a destruction facility or for recycling measures
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
ldquoBest Safe PracticesrdquoDigital Data Destruction ndash Flash Drives
bull Recommendations and amp Guidelines from NIST on Flash Destructionndash HDD- Media NIST SP-800-88 September 2006
042023 Florida Gulf Coast ARMA Chapter 29
Flash Memory-NIST SP 800-88 September 2006
Compact Flash Drives SD
Overwrite media by using agency-approved and validated overwriting technologiesmethodstools
See Physical Destruction Destroy media in order of recommendations1048707 Shred1048707 Disintegrate1048707 Pulverize1048707 Incinerate by burning in a licensed incinerator
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
NIST Users
042023 30Florida Gulf Coast ARMA Chapter
Florida HouseBill 1066
Florida Senate Bill1366
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Donrsquot forget
042023 31Florida Gulf Coast ARMA Chapter
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
042023 32Florida Gulf Coast ARMA Chapter
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Disposal
bull What is in a Hard Drivendash Leadndash Brominated Flame Retardantsndash Bariumndash Mercuryndash Berylliumndash Cadmium
042023 33Florida Gulf Coast ARMA Chapter
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
CDs
042023 34Florida Gulf Coast ARMA Chapter
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
State E-Waste Guidelines
bull 19 States already have E-Waste Legislationbull All states will have in 2 ndash 3 yearsbull Makes it illegal to dump E-Waste in landfillsbull Puts a carbon tax on manufacturers
042023 35Florida Gulf Coast ARMA Chapter
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Keys
bull Education
bull Discipline
bull Understand Levels
042023 36Florida Gulf Coast ARMA Chapter
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Education
bull All employeesndash Used laptopsndash Used hard drives
bull System Administratorsndash Always new things to learnndash OS and Networking
bull Hands on training versus multiple choice
042023 37Florida Gulf Coast ARMA Chapter
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Discipline
bull The human factorndash Affects everything
bull Lazy orbull Doesnrsquot understand task completely
042023 38Florida Gulf Coast ARMA Chapter
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Security Matrix
bull Time to recoverbull Level of Effort
ndash Cost to recoverbull Laborbull Equipment
bull Information Importancendash Classifiedndash Personal
042023 39Florida Gulf Coast ARMA Chapter
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
In the field -vs- In the lab
bull Emergency Destructndash Iranian Embassyndash EP3
bull Home on the rangendash More timendash Destruction before
transit
042023 40Florida Gulf Coast ARMA Chapter
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Technology Changes
bull Technology is not affected by bureaucracyndash Patterned Mediandash Heat Assisted Recordingndash Holographic Media
bull Laws and Regs have to change too
042023 41Florida Gulf Coast ARMA Chapter
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Points to Remember
bull What regulations govern your EOL securitybull Are they up to date to meet todays
standardsbull Even if you cannot RESUSE your hard driveshellip
you should PURGE the data before you hand over for destruction or Degausing
bull Donrsquot forget security at EOL
042023 42Florida Gulf Coast ARMA Chapter
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-
Contact Info
Andy Crawford72759621097276565744
acrawforddestructdatacom
042023 43Florida Gulf Coast ARMA Chapter
- Data Security End of life
- 263470869
- Protecting Data
- Where is End of Life Data Contained
- How much is a Megabyte
- CDrsquos and DVDrsquos
- Hard Disc Drives
- Magnetic Tape
- Floppy Discs
- Flash Drives
- Economic Impact
- Regulatory Drivers ndash Penalty Matrix
- Most Peoplersquos Idea
- Data Security Life Cycle
- Show me the money
- End of Life
- Where do they all go
- End of Life Myths
- DoD 5220
- Degaussing and Secure Erase
- CD-Rom DVD Destruction
- Slide 22
- Setting Policy
- NIST 800-88
- Slide 25
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Hard Disc Drives
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash CD DVD Discs
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Magnetic Tapes
- ldquoBest Safe Practicesrdquo Digital Data Destruction ndash Flash Drives
- NIST Users
- Donrsquot forget
- Slide 32
- Disposal
- CDs
- State E-Waste Guidelines
- Keys
- Education
- Discipline
- Security Matrix
- In the field -vs- In the lab
- Technology Changes
- Points to Remember
- Contact Info
-