Transcript Inexpensive hard drive preparation (<$50)

Media Sanitization
NIST 800-88 Guidance
 Terms Defined
 When is media under/not under your
control?
 Flowchart for decision making
 Spreadsheet of methods for media
sanitization
 Quick way to reduce large inventories

Terms



Clearing – protection against a keyboard
attack
Purging – protection against laboratory
attack
Destroying – media cannot be reused
ATA disk drives manufactured after
2001 (over 15 GB) the terms clearing and purging have
converged.
NIST Guidance - Control












Under Organization Control:
􀂄Media being turned over for maintenance are still considered under
organization control if contractual agreements are in place with the
organization and the maintenance provider specifically provides for the
confidentiality of the information.
􀂄Maintenance being performed on an organization’s site, under the
organization’s supervision, by a maintenance provider is also considered
under the control of the organization.
Not Under Organization Control:
􀂄Media that are being exchanged for warranty, cost rebate, or other
purposes and where the specific media will not be returned to the
organization are considered to be out of organizational control.
Helpful Tips






Document the serial number, of both the Hard
Drive and host computer.
SCSI drives, once removed from host,
overwriting becomes difficult to impossible
Degaussers are rated by ORSTEDS they produce
- your drive may require higher
Many modern Degaussers’s chamber height is
approx. 1” high
Pre-destruction may be permissible at your
facility.
Consider chain of custody if using an offsite
service provider
Chain of Custody improvements
Pre-Destruction
Methods of preparing hard drives for shipment to Intelligent Decisions for Certification of Destruction.
Model #
MfgrSpecification Capacity
HD-3w Garner Products
HDTD-8300Garner Products
PD-8700 Garner Products
PD-8500 Garner Products
DD9000 Norazza
HDCrushereDR Solutions
HD-6600 Data Security, Inc.
8,500 Oe 1.3" H
7,500 Oe 1.65"
10,000 Oe 1.66"
N/A
1.66"
N/A
1.66"
N/A
1.66"
4,200 Oe 3.5"
Weight
Time to prepare
75lbs
83lbs w/Case
178 LBS
80lbs
80lbs
80lbs
420 Lbs
10 secs
45 secs
120 secs
70 secs
10 secs
10 secs
60 secs
Type
Degausser
Degausser
Degause&Destroy
Destroy (folds HD)
Destroys(Punches 4 holes)
Destroys(drills spindle)
Degausser
Technology
Magnetic
Magnetic
Magnetic & Hydralic
Hydralic
Hydralic
Hydralic
Magnetic
Cost
$8,975.00
$11,950.00
$25,950.00
$8,950.00
$12,999.00
$8,000.00
$39,990.00
Methods of preparing hard drives for reuse/shipment to Intelligent Decisions for Certification of Reuse
Model#
Manufacturer
Speed Capacity
DriveCompletion
Types Times
6007SAS-ImageMASSter
ICS
4-5Gb/min 8 drives SAS,SATA,IDE
F.G-4000-001C
ICS
3Gb/min 8 drives P-ATA, S-ATA&LapTop
WipeDrive Pro
White Canyon
WipeDrive Pro
White Canyon
Type
1-8 hrs. perDOD
8 Overwrite& SinglePass H/W and Software
Cost
$8,050.00
1-8 hrs. perDOD
8 Overwrite& SinglePass H/W and Software
$2,500.00
1-4Gb/Min 1drive SAS,SATA,SCSI,IDE,RAID 1-8 hrs DOD Overwrite& SinglePass Software
$159.00
1-6 Gb/min36-64DrivesSAS,SATA,SCSI,IDE,RAID 1-8 hrs DOD Overwrite& SinglePass PXE Boot Software TBD Volume License
Degausser capacity
(NSA DEPL – March 2008 Pg.9)
Questions/Contact info





Perry Dollar, CISSP, VACSP
Media Sanitization Program Manager
Department of Veterans Affairs
410-962-7950 Xt.254
[email protected]