http://en.wikipedia.org/wiki/DOD_5220.22-M
DoD 5220.22-M is sometimes cited as a standard for sanitization to counter data remanence. The NISPOM actually covers the entire field of government-industrial security, of which data sanitization is a very small part (about two paragraphs in a 141 page document).[4] Furthermore, the NISPOM does not actually specify any particular method. Standards for sanitization are left up to the Cognizant Security Authority. The Defense Security Service provides a Clearing and Sanitization Matrix (C&SM) which does specify methods.[5] As of the June 2007 edition of the DSS C&SM,
overwriting is no longer acceptable for sanitization of magnetic media; only degaussing or physical destruction is acceptable.
If you issue a certificate of destruction you better be destroying the drives.
Bookmarks