Are there any standards which consider safe destroying of VOIP phones? I would like to prevent eventual data leakage after devices which have left the company.

  • 1
    Do your VOIP phones actually store any data? Ours don't. They pull all of the necessary data from the server on boot, including extension number, Caller ID, phonebook, speed dial, and call history (the server provides these based on the MAC address of the phone). The only thing stored in the phone itself is the (private) IP address of the server and VLAN number they should be on, neither of which is at all useful without already being on the office network. – Moshe Katz Nov 27 '13 at 0:58
  • I'm pretty sure fire will destroy it, if set hot enough and long enough. :) – woliveirajr Dec 9 '13 at 18:00

Considering every VOIP phone is different, it's kind of hard to standardize depending on where the storage module is located.

There are companies who are specialized in hardware destruction, opting for performing destruction yourself can be very very tricky. Should you be able to locate the storage module you could use the Guidelines for Media Sanitization produced by NIST.

  • I'd say remove the data storage module and perform whatever safe practices there are for that particular type of data storage hardware... – Shadur Nov 26 '13 at 12:28
  • 2
    Figuring out if you can trust that company is even harder than figuring out how to destroy something yourself. I'd use them for corporate data where following best practices is more important than actual security, but not for something I actually care about. – CodesInChaos Nov 26 '13 at 14:16

NIST has created SP 800-164, "Guidelines on Hardware-Rooted Security in Mobile Devices". It is a document that discusses not only the destruction of the device, but other security features that you should be considering, including remote wipe, certificate management, device integrity, using isolation to address various threats, key storage, BYOD, etc.

There is a lot to think about when your organization begins to extend its footprint into the mobile arena, and sanitization is only one aspect.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.