Certified Cloud Security Professional (CCSP)Cloud Data SecurityMedium
A healthcare organization is migrating patient health records (PHR) to a cloud environment. Due to strict regulatory compliance (e.g., HIPAA), they must ensure that all PHR data is irretrievably erased after its retention period expires. Which data destruction method is most appropriate and effective for meeting this requirement in a cloud setting?
- ACryptographic Erasure
- BDegaussing
- CSecure Erase (ATA Command)
- DLogical Deletion
Show answer & explanationAnswer & explanation
Correct answer: A. Cryptographic Erasure
Cryptographic erasure is the most appropriate method in a cloud environment because it renders data unrecoverable by revoking access to the encryption key. This is effective even if the underlying physical storage is shared or reused, addressing the 'irretrievably erased' requirement without needing physical access to the storage media.
Why the other options are wrong
- B. Degaussing is a physical destruction method for magnetic media and is not practical or feasible for a cloud customer to perform on provider infrastructure.
- C. Secure Erase (ATA Command) is designed for physical drives and is not typically applicable or controllable by cloud customers for shared cloud storage.
- D. Logical deletion only marks data as deleted and does not guarantee irretrievable erasure, as data may still reside on storage media.
Cryptographic Erasure
Cryptographic erasure is a data destruction technique where the data is rendered unreadable and unrecoverable by destroying or revoking access to the cryptographic key used to encrypt it, rather than directly overwriting the data itself.
- Renders encrypted data unrecoverable.
- Achieved by destroying or revoking the encryption key.
- Effective for shared or multi-tenant storage.
- Does not require physical access to storage media.
Memory trick: Crypto Erase: Key to Irretrievable Data Loss.