16.12.2009

On-site Disk Wipe Combats Explosive Growth in Information Security Incidents

When sensitive Lockheed Martin missile data was found on eBay-listed computers earlier this year, companies around the world began to rethink how they retire information technology (IT) assets. In fact, in 2008 alone, more records were breached than the previous four years combined (i), while the cost per data breach rose to over $6.6 million, up from $4.7 million in 2006 (ii). The increasing risk of data breaches, coupled with the need for global data security standards compliance, is leading many companies to explore the merits of on-site data erasure and end-of-life-cycle solutions.

“Costly data breaches jeopardize corporate compliance with key regulations – such as those in the payment card industry, those governing the Department of Defense, and the Gramm-Leach-Bliley Act – leaving companies to search for foolproof ways to remove sensitive data from IT assets flagged for retirement or redeployment,”

“Rather than risk theft of sensitive data during transport to off-site erasure facilities, many companies are demanding on-site solutions to clean disks, whether through a third-party service or in-house personnel. In either case, A1 Positive’s data erasure Services provide the technology that best protects information.”

ITADs Use Certified Software Tools to Wipe Hard Drives On-site
On-site data erasure offers point-to-point control for companies looking to remove data from IT assets. In fact, it is now considered an information security best practice to erase data on-site, even if it will later be removed by an off-site service provider. When looking for either on-site or off-site disk wipe services, it is critical for companies to choose a qualified and responsible third-party recycler or information technology asset disposition (ITAD) provider. According to Willgren, organizations should look for the following characteristics when selecting a third party for hard-drive cleaning:
• Software wiping tools that overwrite 100 percent of hard drives and provide detailed data erasure reports with asset serial numbers for compliance verification and asset tracking
• EPA-best practice physical disposal that adheres to a zero-landfill policy and Responsible Recycling (R2) standards
• International Standards Organization (ISO) compliance and transparent processes for disk wiping and disposal
• Full insurance from a qualified logistics carrier and ability to provide references
• Certificates of indemnification for data destruction and environmental disposition for all assets

A1 Positive Recycling Provide An All-in-One Data Erasure Solution Ensures 100 Percent Clean Disks
A1 use Eraser Disk offering in-house IT staff and third-party on-site disk wipe providers a convenient, portable data destruction solution with auditable reports. Eraser Disk data erasure solutions adhere to all major government and military erasure standards, while their ability to erase all data – even on hidden and remapped sectors – meets Health Insurance Portability and Accountability Act (HIPAA), Sarbanes-Oxley Act (SOX), GLBA and other regulatory requirements. As the industry leader, A1 Positive’s expertise ensures smooth integration of automated data erasure, hardware asset management and report collection for any organization.

Q. What is the DoD standard you mention?
A. This is a manual for government contractors and suppliers, called DoD 5220.22-M. It is issued by the Department of Defense and contains security guidelines for companies doing business with the US Government. The EraserDisk Short Wipe routine meets the requirements in DoD 5220.22-M for cleaning a hard drive.

Format Fixed Disk - Writes a pattern of information, then formats the drive with a factory style low level format.

Short Security Wipe – Overwrites data twice with two different data patterns.

Long Security Wipe - Overwrites data six times using four different data patterns.

Long Security Wipe with Format - Overwrites data six times using four different data patterns, then performs a factory style low level format.

EXCEEDS SECURITY REQUIREMENTS FOR DEPARTMENT OF DEFENSE – With EraserDisk, once the information is gone, there’s no way somebody can get it back. The only method more safe would be to physically dismantle the drive and destroy the platters inside.

EraserDisk is an independent operating system and comes on a boot-able CD. For older systems that don’t have a boot-able CD-ROM drive, A1 can make a boot-able floppy disk from the Eraser-Disk CD. 4 DIFFERENT LEVELS OF ERASURE- Eraser-Disk wipes a drive at one of four selected levels: Eraserdisk is certified DOD 5220.22-M standard.

For more information on A1 Positive’s On-Site data erasure solutions, please Call: (01392) 20-27-79 or visit http://www.a1prp.co.uk