An organization is preparing to permanently decommission a batch of legacy storage media containing sensitive customer information in compliance with corporate security governance. Arrange the following steps of the hardware decommissioning and sanitization lifecycle in the correct order from first to last.
- 1Record the serial numbers of the targeted media in the organization's chain-of-custody log.
- 2Perform a cryptographic wipe or logical purge of the data stored on the drives.
- 3Execute physical destruction (such as industrial shredding) of the storage media.
- 4Obtain and archive a signed Certificate of Destruction from the certified vendor.
Answer
The correct order of steps for the media decommissioning process is: 1) Record the serial numbers in the chain-of-custody log, 2) Perform a cryptographic wipe or logical purge, 3) Execute physical destruction of the storage media, and 4) Obtain and archive a signed Certificate of Destruction.
The correct lifecycle sequence begins by establishing a chain of custody through logging serial numbers. Next, a logical purge or cryptographic wipe is performed to protect data in transit or handling. After that, physical destruction permanently destroys the storage media. Finally, a Certificate of Destruction is acquired and archived to prove regulatory compliance.
Step-by-Step Solution
Key Concept
Chain of Custody and Data Destruction Lifecycle