Van, That's why HDS (and I hear now EMC) provide a shredder in the hardware. You can shred volumes unattended after a drill, or you can "shred" a LUN or volume that was previously assigned to Human Resources or Credit Card application before assigning that LUN or Array Group to a development system.
Ron > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > Behalf Of Van Dalsen, Herbie > Sent: Monday, January 14, 2008 9:10 AM > To: [email protected] > Subject: Re: [IBM-MAIN] Data Erasure Products > > Thanks Ron, > > I was hoping that the formatting of the ESS could do that for me. Not > sure what's going to happen to the 3590 carts... But then that is > another story altogether... > > Herbie > > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > Behalf Of Ron Hawkins > Sent: 14 Januarie 2008 03:20 nm > To: [email protected] > Subject: Re: Data Erasure Products > > Herbie, > > A format as you describe will leave the data old data unreadable, and > that > will probably suffice in most cases. However it is not actually > shredded, > and the prior contents of the drives can be recovered in the best James > Bond > tradition - art becomes life. > > If your company requires secure erasure, then the drives need to be > overwritten several times with patterns that will mask the prior > contents. > The FDRERASE software does this by waiting for each pass to settle to > disk > before writing the next pass, so that overwrites do not occur in cache. > It > works exactly as advertised. > > Ron > > > -----Original Message----- > > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > > Behalf Of Van Dalsen, Herbie > > Sent: Monday, January 14, 2008 3:05 AM > > To: [email protected] > > Subject: Re: [IBM-MAIN] Data Erasure Products > > > > My question on this topic is the following... > > If you are replacing your shark with a new one, once the data is > > migrated, would it not be possible to go to the ESS console and > delete > > all your disk, and reformat them for opens stems, and create 100's of > > 1.2m disks, leaving the ESS format software to effectively kill all > > usable data... You can then walk away while this processes all by > it's > > own, no baby-sitting needed, and if your neurosis have not died down > > after that, reverse the process... Surely this happens at HW level > and > > should be more successful that other software driven efforts? > > > > Herbie > > > > > > -----Original Message----- > > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > > Behalf Of Stephen Mednick > > Sent: 12 Januarie 2008 10:07 nm > > To: [email protected] > > Subject: Re: Data Erasure Products > > > > > > > > Outside of FDRERASE and good old ICKDSF are there any > > > products in the market that can erase data from mainframe DASD? > > > > > > I didn't see anything in the CBT archive for DASD, just some > > > tape erasure programs. > > > * * > > > > > > -- > > > Mark Jacobs > > > Time Customer Service > > > Tampa, FL > > > ---- > > > > > > > There are any number of solutions both hardware & software that lay > > claim to > > being DOD compliant for the purposes of erasing data from mainframe > > DASD > > but very > > few that can make the claim that they have been independently > certified > > by a > > government sponsored agency as meeting the compliance requirements. > > > > Before selecting any of the solutions put forward, one needs to check > > with their > > IT Security Advisor and/or Auditors to see what their expections are, > > that is, > > whether a compliant solution is good enough or whether it has to be > > certifed as a > > compliant solution. A list of certified compliant solutions can be > > found > > at the > > following site listed under the heading "Technology Type" as > "Sensitive > > Data > > Protection": > > > > http://niap-ccevs.org/cc-scheme/vpl/ > > > > Furthermore, the question needs to be asked whether or not the > > requirement is for > > "clearing"/"overwriting" the disk or the more stringent requirement > of > > "purging"/sanitizing" the disk. These definitions are described the > > documents: > > > > NCSC-TG-025 A Guide to Understanding Data Remanence in Automated > > Information > > Systems > > DoD 5220.22-M National Industrial Security Program Operation > Manual > > > > "clearing"/"overwriting" requirements are usually ok for the OP's > > requirement > > when leaving a DR site but the "purging"/"sanitizing" requirement may > > be > > a > > mandatory requirement when decommission obsolete storage subsystems. > > > > There are a number of Government & Industrial guidelines that dictate > > what are > > the requirements. These include HIPPA, Sarbane-Oxley, Gramm-Leach- > > Billey > > as well > > as the PCIDSS requirement for organisations who are involved with the > > issue and > > processing of credit card payment etc. > > > > At the end of the day, the decision as to what product to use may not > > be > > that of > > the humble storage management technician but a decision that is > > dictated > > by the > > requirements of the corporate IT Security Advisor and/or Auditor. It > > may well be > > worth your job tenure to go and check! > > > > > > Stephen Mednick > > Computer Supervisory Services > > Sydney, Australia > > > > --------------------------------------------------------------------- > - > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN > INFO > > Search the archives at http://bama.ua.edu/archives/ibm-main.html > > Elavon Financial Services Limited > > Registered in Ireland: Number 418442 > > Registered Office: Block E, 1st Floor, Cherrywood Business Park, > > Loughlinstown, Co. Dublin, Ireland > > Directors: Robert Abele (USA), John Collins, Terrance Dolan (USA), > > Pamela Joseph (USA), Declan Lynch, John McNally, Malcolm Towlson > > Elavon Financial Services Limited, trading as Elavon, is regulated by > > the Financial Regulator > > > > --------------------------------------------------------------------- > - > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN > INFO > > Search the archives at http://bama.ua.edu/archives/ibm-main.html > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > Elavon Financial Services Limited > Registered in Ireland: Number 418442 > Registered Office: Block E, 1st Floor, Cherrywood Business Park, > Loughlinstown, Co. Dublin, Ireland > Directors: Robert Abele (USA), John Collins, Terrance Dolan (USA), > Pamela Joseph (USA), Declan Lynch, John McNally, Malcolm Towlson > Elavon Financial Services Limited, trading as Elavon, is regulated by > the Financial Regulator > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html

