Information that is no longer needed needs to be destroyed in a manner based on what it contains (its classification). Media containing confidential or restricted information must be destroyed so that the information cannot be retrieved. Deleting files does not destroy the information, it still can be recovered!
A Few Tips
- Dispose of sensitive information properly - Simply deleting a file does not completely erase it. To ensure that an attacker cannot access these files, make sure that you adequately erase sensitive files.
- Follow record retention and disposal guidelines from Metro Records Management and applicable federal, state, and local laws.
- Don’t store confidential or restricted information longer than necessary.
- Hard drives may be physically destroyed, flooded with a strong magnetic field or wiped using Department of Defense compliant software.
- CDs, DVDs and jump drives (even if inoperable) should be physically destroyed or placed in a Richards and Richards media destruction bin if available in your department.
- Paper documents should be shredded or placed in a Richards and Richards shredding bin.
- Carefully dispose of mobile devices - With the constant changes in the smartphone market, many users frequently upgrade to new devices. Make sure you wipe the information from your smartphone before disposal. For information on how to do this, check the website of your mobile provider or the manufacturer.
Additional tips on data destruction