Pace it data-disposal_and_destruction_methods_bf_sw

Data disposal and destruction methods.

Page 2

Instructor, PACE-IT Program – Edmonds Community College

Areas of Expertise Industry Certifications

PC Hardware

Network Administration

IT Project Management

Network Design

User Training

IT Troubleshooting

Qualifications Summary

Education

M.B.A., IT Management, Western Governor’s University

B.S., IT Security, Western Governor’s University

Entrepreneur, executive leader, and proven manger with 10+ years of experience turning complex issues into efficient and effective solutions.

Strengths include developing and mentoring diverse workforces, improving processes, analyzing business needs and creating the solutions required— with a focus on technology.

Brian K. Ferrill, M.B.A.

Page 3

Data disposal and destruction methods.

– Standard format vs. low level format.

– Hard drive sanitation methods.

– Physical destruction methods.

PACE-IT.

Page 4

Data disposal and destruction methods.

When hardware is being replaced, it’s imperative that sensitive data is destroyed on the outgoing hardware.

Many companies have policies on what must occur to drives and storage media that have contained organizational data once the media reaches obsolescence. As a qualified technician, it is your responsibility to know what that policy is and follow it. If your company doesn’t have a policy, you should work with senior management to get one implemented.

PACE-IT.

Page 5

Standard format vs. low level format.Data disposal and destruction methods.

Page 6

Standard format vs. low level format.

– Standard format.» Quick: prepares a disk to receive a file structure

(e.g., FAT32 and NTFS).» Full: same as a quick format, but also checks the

drive for bad sectors and marks them.» Standard format doesn’t really destroy the files,

just the index for the file structure.» Un-format tools are available.» Writing 0s to the disk is effective.

– Low level format.» Modern drives are low level formatted at the

manufacturer.» Actually defines the position of tracks and sectors;

it is an effective method of destroying data.

Data disposal and destruction methods.

Page 7

Hard drive sanitation methods.Data disposal and destruction methods.

Page 8

Hard drive sanitation methods.

– Overwrite.» Deleting files only deletes the address; they can

be recovered.» Overwriting a deleted file still leaves traces

behind that can be recovered.

– Drive wiping» Delete the file.» Overwrite the location multiple times with a

changing binary pattern.» This is an effective method of sanitizing a hard

drive.

Data disposal and destruction methods.

Page 9

Physical destruction methods.Data disposal and destruction methods.

Page 10

Physical destruction methods.

– Degaussing tool/electromagnetic method.

» Data is magnetic in nature.» Strong magnetic fields will scramble the data.» Traces may remain.» Quick and easy.

– Drilling» Use a power drill to drill several holes through the hard

drive.» Can be considered an acceptable method of

destruction.» Fairly quick and easy.

– Sanding/grinding» Taking the drive apart and sanding or grinding off the

media is a highly effective method, but it is time consuming.

– Shredding» Heavy duty industrial shredders will completely destroy

drive.» Easy, but can be costly.» Use a service to reduce capital expenditures.

Data disposal and destruction methods.

Page 11

What was covered.Data disposal and destruction methods.

The standard format process does not do an effective job of destroying data, while a true low level format is effective. Low level formats are mostly performed at the manufacturers’ facilities and are difficult to duplicate at the office level.

Topic

Standard format vs. low level format.

Summary

Deleting and overwriting a file may only partially destroy the data. Drive wiping is effective; it overwrites the file location with a changing pattern of binary code.

Hard drive sanitation methods.

Physical destruction of a hard drive will ensure data is non-recoverable. Degaussing will scramble most data. Drilling holes may be deemed an effective method. Sanding or grinding the recording media will destroy the data, but is labor intensive. Shredding drives with an industrial shredder is effective and easy.

Physical destruction methods.

Page 12

THANK YOU!

This workforce solution was 100 percent funded by a $3 million grant awarded by the U.S. Department of Labor's Employment and Training Administration. The solution was created by the grantee and does not necessarily reflect the official position of the U.S. Department of Labor. The Department of Labor makes no guarantees, warranties, or assurances of any kind, express or implied, with respect to such information, including any information on linked sites and including, but not limited to, accuracy of the information or its completeness, timeliness, usefulness, adequacy, continued availability or ownership. Funded by the Department of Labor, Employment and Training Administration, Grant #TC-23745-12-60-A-53.

PACE-IT is an equal opportunity employer/program and auxiliary aids and services are available upon request to individuals with disabilities. For those that are hearing impaired, a video phone is available at the Services for Students with Disabilities (SSD) office in Mountlake Terrace Hall 159. Check www.edcc.edu/ssd for office hours. Call 425.354.3113 on a video phone for more information about the PACE-IT program. For any additional special accommodations needed, call the SSD office at 425.640.1814. Edmonds Community College does not discriminate on the basis of race; color; religion; national origin; sex; disability; sexual orientation; age; citizenship, marital, or veteran status; or genetic information in its programs and activities.