U.S. Department of Health and Human Services
System disposal has five parts as stated in NIST SP 800-64 Rev. 2:
Building and Executing a Disposal/Transition Plan ensures that all stakeholders are aware of the future plan for the system and its information. This plan should account for the disposal / transition status for all critical components, services, and information.
Information Preservation ensures that information is retained, as necessary, to conform to current legal requirements and to accommodate future technology changes that may render the retrieval method obsolete
Media Sanitization ensures that data is deleted, erased, and written over as necessary to retain confidentiality
Hardware and Software Disposal ensures that hardware and software is disposed of as directed by the Information Systems Security Officer
System Closure ensures that the information system is formally shut down and disassembled.
Page 2 of 3
Disposition Phase Security
Disposal of System Components
Media sanitization is important either at the end of the system’s life cycle or at any point when new hardware or media is replacing existing hardware or media.