Certified Cloud Security Professional (CCSP)Cloud Data SecurityMedium
A healthcare organization is migrating patient health records (PHR) to a cloud environment. Due to strict HIPAA compliance requirements, they need to ensure that PHR data is permanently and irrevocably deleted from storage media when it is no longer needed, even in the event of hardware disposal. Which data destruction method is most effective for meeting this requirement in a cloud context?
- ADegaussing
- BCryptographic Erasure
- CLogical Deletion
- DOverwriting
Show answer & explanationAnswer & explanation
Correct answer: B. Cryptographic Erasure
Cryptographic erasure renders data unrecoverable by destroying or revoking access to the encryption keys, effectively making the encrypted data useless. This is highly effective in cloud environments where physical destruction of media isn't always feasible for the customer.
Why the other options are wrong
- A. Degaussing is a physical destruction method for magnetic media, typically not applicable or verifiable by a cloud customer for shared cloud storage.
- C. Logical deletion only removes pointers to data, making it invisible but still recoverable.
- D. Overwriting data can be effective but might be incomplete or require multiple passes, and is difficult for a cloud customer to verify on physical media.
Cryptographic Erasure
A data destruction method that renders data unrecoverable by destroying or revoking access to the encryption keys used to encrypt the data. The encrypted data may still exist, but without the key, it is permanently unreadable.
- Destroys or revokes encryption keys.
- Encrypted data becomes unrecoverable.
- Effective for cloud and virtualized environments.
Memory trick: Keys Erased, Data Gone Forever.