ISC2 CISSP (Certified Information Systems Security Professional)Asset SecurityHard
A government contractor is decommissioning a server rack containing multiple hard drives that previously stored 'Secret' classified information. The contract mandates that all media containing classified data must be subject to specific destruction procedures outlined in NIST SP 800-88 Rev. 1. What is the MOST appropriate data sanitization method for these hard drives to meet the 'Secret' classification requirements?
- AOverwriting with a single pass of random data.
- BDegaussing using an approved high-strength degausser.
- CPhysical shredding into small particles (2mm or less).
- DSoftware-based cryptographic erase.
Show answer & explanationAnswer & explanation
Correct answer: C. Physical shredding into small particles (2mm or less).
For 'Secret' classified information, especially when mandated by NIST SP 800-88 Rev. 1, the highest level of sanitization, 'Destroy,' is typically required. Physical destruction methods like shredding, pulverizing, or incineration ensure data is absolutely unrecoverable. While degaussing (a 'Purge' method) can be effective for magnetic media, physical destruction offers the highest assurance and is often specified for sensitive classified data.
Why the other options are wrong
- A. Overwriting (Clear) is generally not sufficient for 'Secret' data.
- B. Degaussing (Purge) is effective for magnetic media but may still leave microscopic traces or be less assured than physical destruction for 'Secret' data.
- D. Cryptographic erase relies on key destruction, not data destruction, and is not suitable for 'Secret' data directly.
NIST SP 800-88 Rev. 1 Destroy Method
A data sanitization method that renders data storage media unusable for further data storage and ensures data is completely unrecoverable by any means.
- Highest level of sanitization assurance.
- Methods include shredding, pulverizing, incineration, melting.
- Often required for classified or highly sensitive data.
Memory trick: Clear Erases, Purge Cleans, Destroy Ends All Means.