|
The data on the workstation hard drives is generally not sensitive, although there is a small chance that some drives may contain some confidential information. The suggested course of action, according to the US Department of Defence DOD 5220.22-M is a 3 pass over-wipe with random binary patterns. This technique guarantees that no data can be recovered by either a member of the public or by a commercial enterprise.
Data recovery may be possible, however the equipment and technique is complex, hugely expensive and not available to outside government agencies. The possible information present on a workstation drive should never warrant this action.
The most obvious risk that most organisations face is that a drive may fall into the public domain without prior sanitising. The likely outcome would be that the new owner would simply format the drive and reuse it. However, a more inquisitive person may check the drive content and discover the operating system. If this event was reported in the media it could prove embarrassing.
*NATO Stock Number 5836-99-500-5299 (60Hz)
**SEAP (Security Equipment Assessment Panel) is an organisation of the Cabinet Office responsible for approving security equipment used to protect Government Assets. This standard was published in June 1997 to enable manufacturers to submit Degaussers against a defined requirement. It specifies the methods of testing and performance of degaussing equipment for use in the destruction of Government protectively marked information. Equipment is categorised as Type 2 (Higher) and Type 1 (Lower) according to the level of erasure they offer.
|