Q |
: |
|
Ans |
: |
Today, many company is using computer system. Data will be stored on hard disk or other storage device. When old device need to dispose, data still keep in the storage or disk. It will cause data breaches. If that kind of storage loss or disposed improperly, hackers may have a chance to restore the data. It is important that you securely erase and not simply delete sensitive files before dispose.
Secondly, several laws have been enacted in different industries in recent years, guiding organizations on data protection and erasure to ensure regulatory compliance. Data erasure is not a new technology, but it’s becoming popular because of data protection, privacy, and information security risks. In the face of unprecedented data leakage scandals and cyber-attacks, including ransomware attacks, government agencies and organizations need to enforce updated protection strategies for sensitive data management. Moreover, when doing business with some banks or government, they may request your company satisfied data erasure compliance, in order to protect sensitive data. If your company fulfill the compliance, it may more chance to get the business. |
Q |
: |
|
Ans |
: |
Strict industry standards and government regulations are in place that force organizations to mitigate the risk of unauthorized exposure of confidential corporate and government data. Regulations in the United States include HIPAA (Health Insurance Portability and Accountability Act); FACTA (The Fair and Accurate Credit Transactions Act of 2003); GLB (Gramm-Leach Bliley); Sarbanes-Oxley Act (SOx); and Payment Card Industry Data Security Standards (PCI DSS) and the Data Protection Act in the United Kingdom. Failure to comply can result in fines and damage to company reputation, as well as civil and criminal liability.
|
Q |
: |
|
Ans |
: |
HDD (hard drives) is magnetic storage, it can be erased by using degausser. SSD is a type of flash memory which CANNOT be erased by using degausser.
|
Q |
: |
|
Ans |
: |
The process of data erasure involves removing or deleting data from a storage device or medium, such as a hard drive, SSD, or USB drive, in a way that makes it unrecoverable. This typically involves overwriting the data multiple times with random patterns of 1s and 0s or using specialized software to perform a secure erase. The goal is to ensure that the data cannot be retrieved or reconstructed, even with the use of specialized recovery tools.
|
Q |
: |
|
Ans |
: |
There are three methods to do data erasure. They are degaussing, data wiping and shredding.
Degaussing can be applied to magnetic storage such as hard disk, magnetic tape, audio cassette tape, floppy disk. It is using powerful magnetic field of a degausser to neutralize or erase data on magnetic storage. To fulfill the compliance, you need to check the power of the degausser For our company, we will use a degausser with 9000OE to perform the degaussing. Data wiping means overwriting the data in storage in order to make original data is unreadable. depends on different compliance, different type of overwriting type will be used. The most frequently used types include a single pass overwrite, a three pass overwrite, a seven pass overwrite, and a secure erase. You need to check which compliance you need to follow and select correct or higher level of wiping type. For example, HIPAA require certain data-wiping specifications for your industry, so make sure to check what is required for the type of data you are wiping. For "secure erase", it is firmware level overwrite command applied to SSD. It is quicker than the normal overwrite method. Shredding is using a destruction to physical destroy the hard disk and make data in the hard disk unreadable. To fulfil the compliance, it should be shredded using a suitable media shredder. Other shredding methods, e.g. destruction with a hammer, may not be enough to fulfill the compliance. "Format" and "Delete" is a software command to delete data in the storage. But those command cannot completely erase data in the storage, many tools can be used to recover data after "Format" and "Delete". |
