The city shreds Confidential paper on schedule but has no approved destruction process for failed hard drives pulled from servers. What should asset security require?
Select an answer to reveal the explanation.
Short Explanation
Paper shredders are great for paper and useless for platters. Failed disks need their own approved path—degauss, cryptographic erase, shred, or pulverize—whatever the media and classification call for. One policy for pulp and another for silicon keeps both out of dumpster diving hands.
Full Explanation
Secure destruction must fit the medium: paper shredding does not sanitize hard drives or SSDs. Organizations define methods (e.g., clearing, purging, disintegration) according to classification and media characteristics, often with certificates of destruction for sensitive assets. Incomplete media coverage leaves residual data risk after devices leave service.