4.6.2. Media Destruction and Electronics Recycling
💡 First Principle: Data on storage media persists after logical deletion and even after formatting. Media destruction ensures that sensitive data cannot be recovered from decommissioned hardware. The method must match the media type and the sensitivity of the data.
Media Destruction Methods
| Method | Applicable Media | Data Destroyed? | Hardware Reusable? |
|---|---|---|---|
| Disk wiping (overwrite) | HDD, SSD | Yes (multiple passes) | Yes |
| Degaussing | HDD, magnetic tape | Yes | No (destroys drive electronics) |
| Shredding | HDD, SSD, tape | Yes | No |
| Crushing | HDD, SSD | Yes | No |
| Incineration | All media | Yes | No |
Important media-specific notes:
- Degaussing does NOT work on SSDs. SSDs use flash memory, not magnetic storage. Degaussing has no effect on flash media—physical destruction is required.
- Disk wiping on SSDs is complicated by wear-leveling algorithms—overwriting logical blocks doesn't guarantee the original data (remapped to spare cells) is erased. Use the drive's built-in secure erase, or on a self-encrypting drive (SED) a Cryptographic Erase (CE)—which discards the on-drive encryption key, rendering all data instantly unrecoverable (the NIST SP 800-88 "Purge" method). Physical destruction remains the highest-assurance option for the most sensitive data.
- Multiple-pass wiping (DoD 5220.22-M standard) writes multiple patterns to ensure data is unrecoverable.
Media Retention Requirements
Some media must be retained for legal or compliance reasons before destruction. Always verify:
- Are any files on this media subject to legal hold?
- Are there any compliance-mandated retention periods in effect?
- Has the data been archived as required before destruction?
Cable Remediation and Electronics Recycling
- Cable remediation: When decommissioning servers, properly clean up and label or remove associated cables. Abandoned cables cause airflow problems, confusion, and eventually fire hazards.
- Internal vs. external recycling: Electronics can be recycled through internal repurposing (redeploying hardware in a different role) or external recycling (certified e-waste recyclers who provide certificates of destruction).
- Repurposing: Before destruction, consider whether hardware can be repurposed in a less sensitive context (lab environment, test bench). Sanitize media first.
⚠️ Exam Trap: "Deleting files" and "formatting a drive" are not media destruction. Both operations only remove the file system index; data remains physically present on the drive and is recoverable with forensic tools. Actual destruction requires one of the methods above.
Reflection Question: A financial institution is retiring servers that stored customer account data. Compliance requires that data be provably unrecoverable. The drives are HDDs. Which destruction method provides the strongest guarantee AND produces documentation that the destruction occurred?
