Many vendors exist to pick up old (enterprise) Hardware for recycling and offer services including sanitization and destruction (shredding).

The concern is that media could potentially still contain sensitive information (through data remanence or simply human error forgetting to sanitize the media before disposal).

Is there any certifications (e.g. ISO) that a vendor should possess to be entrusted with old storage media (especially hard drives and SSDs)?

  • This will depend heavily on your location and/or the location of the contractor. – Tom K. Jul 16 '18 at 11:30

You could look for a company that uses DoD 5220-22.M standards for data destruction : http://www.dss.mil/documents/odaa/nispom2006-5220.pdf

I use a company that says they meet that standard.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.