Data Destruction Management: Insourcing vs. Outsourcing
Choosing how to take care of your company’s old data can be a fairly involved process. The NIST Special Publication 800-88 Guidelines for Media Sanitization mandates that “in order for organizations to have appropriate controls on the information they are responsible for safeguarding, they must properly safeguard used media.” Taking control of old electronic media means disposing it in a safe, secure, and compliant fashion.
Data degaussing followed by data shredding is the only 100% reliable way to rid old electronic media devices of the sensitive information stored within them. This method, used by security leaders like the NSA, CIA, and FBI, can be managed either by an in-house team or outsourced to a specialized data destruction provider. Both solutions can be viable options providing best practices are followed, whether performing the destruction internally or looking to outsource to a vendor.
When making a decision about who will manage your company’s data destruction, there are a few pros and cons to keep in mind:
Choosing a vendor (or not choosing one) is an important decision; one based on standards of trust and expertise. Check out our guidelines for what every data destruction vendor should have here.