Protecting Sensitive Information Processed and Stored in Information Technology (IT) Systems

This bulletin explains the need for media sanitization, which is the process for removing confidential data from storage media, with reasonable assurance that the data cannot be retrieved and reconstructed. NIST recommendations to help organizations and individuals securely manage the information... See full abstract

This bulletin explains the need for media sanitization, which is the process for removing confidential data from storage media, with reasonable assurance that the data cannot be retrieved and reconstructed. NIST recommendations to help organizations and individuals securely manage the information processed and stored on devices and media are discussed. Topics covered include the available sanitization methods, the different types of media, techniques for removing data, and methods for disposing of media. Also covered are issues related to the procedures and principles that influence decisions about media sanitization, and to the conduct of the decision-making process within an organization. References to NIST publications that assist in the information technology (IT) planning process, the secure handling of media, and the protection of the confidentiality of information are provided.
Hide full abstract