11 May, 2023

Data Erasure Standards

Data security is a crucial aspect of modern life. With the amount of sensitive data that we store and share online, it’s essential to ensure that any unwanted data is securely erased. Two widely recognized data erasure standards are the DoD 5220-M and NIST SP 800-88r1.

DoD 5220-M

The Department of Defense 5220-M standard, also known as the National Industrial Security Program Operating Manual (NISPOM), was developed in the 1990s to help protect sensitive government data. It specifies three different methods for data sanitization:

1. Overwriting: Overwriting is the process of writing new data over existing data. The DoD 5220-M standard requires at least three passes of overwriting to ensure that the data is irretrievable.
2. Degaussing: Degaussing is the process of using a strong magnetic field to erase data from magnetic storage media. The DoD 5220-M standard requires degaussing to be done with a device that meets specific magnetic field strength requirements.
3. Physical Destruction: Physical destruction involves physically damaging the storage media to the point that the data is irretrievable. The DoD 5220-M standard specifies that the destruction should be done using an NSA-approved destruction method.

NIST SP 800-88r1

The National Institute of Standards and Technology (NIST) is a non-regulatory agency of the United States Department of Commerce. They are responsible for developing and maintaining cybersecurity standards and guidelines. NIST SP 800-88r1 is a guideline for media sanitization. It provides a framework for selecting and applying media sanitization techniques based on the confidentiality of the information on the media.

NIST SP 800-88r1 specifies four different methods for data sanitization:

• Clear: Clear is the process of removing data from storage media using standard methods. This includes deleting files, formatting the storage media, or using the “Reset” function on mobile devices.
• Purge: Purge is the process of sanitizing storage media so that it is impossible to recover any data from it. This includes overwriting data with random values, degaussing, or using an NSA-approved destruction method.
• Destroy: Destroy is the process of physically damaging storage media so that it is impossible to recover any data from it. This includes shredding, incinerating, or disintegrating the storage media.
• Cryptographic Erasure: Cryptographic erasure involves rendering the data unreadable through the use of encryption. This can be done by using a strong encryption algorithm to encrypt the data and then destroying the encryption key.

Which Standard to Choose?

Both DoD 5220-M and NIST SP 800-88r1 provide guidelines for securely erasing data. However, NIST SP 800-88r1 is more widely used in the private sector, while government agencies primarily use DoD 5220-M.

When selecting a data erasure standard, it’s important to consider the sensitivity of the data and the potential consequences of a data breach. Organizations should also consider the legal requirements for data erasure in their country or region.

Conclusion

Data security is essential, and securely erasing unwanted data is a crucial aspect of it. The DoD 5220-M and NIST SP 800-88r1 standards provide guidelines for securely erasing data, and organizations should choose the standard that best fits their needs. By following these standards, organizations can ensure that their sensitive data remains protected.

About U-Reach Data Solutions Inc.

With 20 years of experience, U-Reach Group specializes in the design and production of stable, high-speed data solution equipment, with a competitive product portfolio which includes duplication, inspection, and sanitization and covers Flash, HDD, and M.2 PCI-E SSDs.

In 2012, U-Reach Data Solutions Inc. established in California as the USA headquarter, extending the manufacturer’s services to North America, offering quality deliveries to meet ever-changing market needs.

Its well-known brand “U-Reach” has been marketed worldwide, and its data equipment has been adopted by many leading manufacturers and companies in the semiconductor IC design field, electronic foundries, military and government institutions, medical and healthcare centers, schools, film production and entertainment industries. To date, U-Reach has become the designated supplier for many semiconductor IC design factories.

U-Reach has set up seven branches around the world, providing a global technical support center (Technological Support Center) and is committed to offering real-time service to local clients and multinational companies.

USA Marketing Team

U-Reach Data Solutions Inc.

Phone : +1 909-628-7030

info@ureach-usa.com