Question

Difficulty: MediumData Destruction and Disposal Methods

An IT technician is tasked with disposing of retired magnetic backup tapes containing confidential enterprise data according to organizational security policy. Place the steps of the data sanitization and chain-of-custody process in the correct chronological order from first to last.

  1. 1Log the serial numbers of the magnetic tapes in the asset inventory tracking system for decommission.
  2. 2Expose the magnetic tapes to an industrial degausser to render the recorded data unrecoverable.
  3. 3Place the degaussed tapes into a locked, tamper-evident container for transport to an off-site shredding facility.
  4. 4Obtain and archive a signed Certificate of Destruction provided by the disposal vendor.

Answer

The correct sequence for magnetic backup tape disposal is: 1) Log the serial numbers in the inventory tracking system, 2) Expose the magnetic tapes to an industrial degausser, 3) Place the degaussed tapes into a locked, tamper-evident container for transport, and 4) Obtain and archive a signed Certificate of Destruction.
Establishing a secure data disposal workflow requires serial number logging first to record asset custody. Next, degaussing purges the magnetic tape data on-site. Securing the media in locked containers preserves physical security during vendor transport. Finally, once physical shredding occurs, receiving the Certificate of Destruction completes regulatory compliance reporting.

Step-by-Step Solution

1
Inventory and document media
Record unique tape serial numbers in the decommission log.
Comprehensive logging ensures full accountability and establishes an unbroken chain of custody before handling begins.
2
Perform initial logical data purging
Degauss the magnetic tapes on-site.
Degaussing disrupts the magnetic fields on magnetic tapes, erasing data on-site so unencrypted information is never exposed during transit.
3
Secure media for transport
Seal degaussed media in locked, tamper-evident transfer containers.
Physical security controls during transport prevent loss, theft, or unauthorized access while en route to shredding.
4
Verify and archive completion documentation
Receive and log the vendor-issued Certificate of Destruction.
The signed Certificate of Destruction serves as compliance proof that media lifecycle management requirements were satisfied.

Key Concept

Data Sanitization and Chain-of-Custody Lifecycle
Rate this question