U.S. Department of Health and Human Services
System disposal has three parts:
Information Preservation ensures that information is retained, as necessary, to conform to current legal requirements and to accommodate future technology changes that may render the retrieval method obsolete
Media Sanitization ensures that data is deleted, erased, and written over as necessary to retain confidentiality
Hardware and Software Disposal ensures that hardware and software is disposed of as directed by the information system security officer
(NIST SP 800-64 Rev.2: Security Considerations in the System Development Life Cycle)
Media sanitization is important either at the end of the system’s life cycle or at any point when new hardware or media is replacing existing hardware or media.
Page 1 of 5