Implementing and Managing Electronic Data Disposal and Destruction
summary
Urgent, practical guidance: companies face real fines (Morgan Stanley cited for ~$35M) and must document processes, inventory media, enforce legal holds, and build QA into destruction. Follow NIST SP 800‑88 guidance: a single overwrite pass is generally sufficient for HDDs; degaussing permanently destroys drives but prevents reuse; SSDs require physical destruction. Avoid selling backup tapes to recyclers, understand cloud replication limits (AWS/GCP/Azure), and choose options based on risk, data type, and regulatory requirements.
AI-written summary · about
chapters (11)
- 0:00Introduction and overview
- 1:04Real-world data destruction risks
- 8:26Data lifecycle and formal processes
- 13:48Policy and quality control
- 18:29Legal holds and compliance
- 23:01NIST SP 800-88 guidelines
- 26:45Choosing sanitization methods
- 34:53Hardware vs software destruction
- 39:30Cloud data destruction challenges
- 43:46Risk assessment and outsourcing
- 47:50Actionable next steps
related talks
05mConcerned but Ineffective: User Perceptions, Methods, and Challenges when Sanitizing
42mEXOTIC DATA RECOVERY & PARADAIS
39mdev.privacy: GDPR in a nutshell
48mDirty Tricks of Computer Hardware
50mEnsuring Data Defensibility in an Era of Inevitable Breaches
20mWhy data privacy is critical for robust data management?
47mYou lost data, unfortunately… Who will knock on your door and why
19mKeeping people away from data: A generative AI use case