Question

Difficulty: EasyData Destruction and Disposal Methods

An IT manager hires a third-party disposal service to physically shred decommissioned hard drives containing sensitive company records. Which of the following documents should the manager obtain from the vendor to officially verify compliance with media destruction standards?

  1. Certificate of DestructionAnswer
  2. B
    Low-level format log
  3. C
    End-of-life licensing agreement
  4. D
    Acceptable use policy audit

Answer

Certificate of Destruction
A Certificate of Destruction is a formal document issued by a data sanitization vendor detailing the date, method of destruction, and serial numbers of destroyed devices to prove compliance during security audits.

Step-by-Step Solution

1
Identify the regulatory requirement
Recognize that organizations require formal, verifiable documentation when outsourcing physical data destruction.
Security compliance audits mandate proof that drives were properly destroyed.
2
Evaluate document types
Identify that a Certificate of Destruction provides serialized tracking and formal confirmation of physical shredding.
Third-party vendors issue this specific legal document upon completing physical disposal.

Key Concept

Certificate of Destruction for physical media disposal validation
Rate this question