I'm studying for the CCSP exam and I think I'm missing something here...
In reviewing data destruction/disposal methods, I'm aware that an on-premise IT environment has several options:
- Physical destruction of media and hardware
The training material I'm using states:
In the cloud, many of these options are unavailable or not feasible. Because the cloud provider, not the data owner, owns the hardware, physical destriction is usually out of the question. Moreover, because of the difficulty of knowing the actual specific physical location(s) of the data at any given moment (or historically) it would be next to impossible to determine all the components and media that would need to be destroyed. Likewise, for that same reason, overwriting is not a practical means of sanitizing data in the cloud.
That leaves cryptoshreadding as the sole pragmatic option for data disposal in the cloud.
I get the first paragraph but I'm confused on how cryptoshredding alone would help here. Is the assumption that the data would have always been encrypted at rest from the very beginning? If not, how would cryptoshredding help to remove remnants of data that was previously stored unencrypted?
Am I missing something here?