6

Many vendors exist to pick up old (enterprise) Hardware for recycling and offer services including sanitization and destruction (shredding).

The concern is that media could potentially still contain sensitive information (through data remanence or simply human error forgetting to sanitize the media before disposal).

Is there any certifications (e.g. ISO) that a vendor should possess to be entrusted with old storage media (especially hard drives and SSDs)?

Improve this question
1
  • This will depend heavily on your location and/or the location of the contractor.
    – Tom K.
    Jul 16, 2018 at 11:30

1 Answer 1

Reset to default
1

You could look for a company that uses DoD 5220-22.M standards for data destruction : http://www.dss.mil/documents/odaa/nispom2006-5220.pdf

I use a company that says they meet that standard.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .