ISC2 Certified in Cybersecurity (CC)Security OperationsHard
A healthcare provider is decommissioning an old server that stored millions of patient records. Before the server is physically destroyed, the organization must ensure that all sensitive data is unrecoverable. Which method provides the highest assurance of data destruction for this scenario?
- AFormatting the hard drives
- BDegaussing the hard drives
- COverwriting data multiple times
- DStandard file deletion
Show answer & explanationAnswer & explanation
Correct answer: B. Degaussing the hard drives
Degaussing involves exposing the magnetic media to a strong magnetic field, which scrambles the data and renders it unreadable and unrecoverable, even with advanced forensic techniques. This is generally considered one of the most effective methods for magnetic media.
Why the other options are wrong
- A. Formatting a hard drive simply prepares it for new data, similar to deletion, and does not securely erase the underlying data.
- C. Overwriting data multiple times is effective for software-based sanitization but can still leave residual magnetic signatures that might be forensically recoverable on older media.
- D. Standard file deletion only removes pointers to data, leaving the data itself recoverable with common tools.
Secure Disposal (Degaussing)
A method of secure data disposal for magnetic media that uses a strong magnetic field to neutralize the drive's magnetic properties, rendering data unrecoverable.
- Effective for hard disk drives and magnetic tapes.
- Cannot be used on solid-state drives (SSDs).
- Typically renders the media unusable afterward.
Memory trick: Only total obliteration ensures data is truly gone.