Wednesday, August 12, 2009

Create Data Destruction Policies

How and Why to Create Data Destruction Policies. Mark Grossman and Tate Stickles. Computerworld. 23 June 2009.
This column looks at creating an effective data destruction policy. Having a consistent data destruction policy followed by everyone at all times is vital. Consistency is key. Your data destruction policy needs to address how to classify and handle each type of data residing on your media. Educate your people and verify they are complying with your policy.

Document the entire data destruction policy so you will know what media is sanitized and destroyed. Your documentation should allow you to quickly answer those who, what, where, when, why, and how questions.

An important step of an effective data destruction policy is to have a process in place so you can follow up with regularly scheduled testing of your process and media to ensure the effectiveness of your policy.

No comments: