What do you mean by verification and proof? Verification and proof that
any particular drive has been wiped destroyed etc., as in hard evidence,
or just a record of a particular procedure that was followed? If it is
anything like the QS/ISO audits that they do at work, all you have to do
is have a particular process/procedure in place with documentation.
That doesn't really provide proof, However. Mind you, I'm not
suggesting that documentation should exist on drives that didn't follow
the proper procedure, I'm saying that the procedure should be changed,
so that the drives can be still used afterwards. If the the
documentation exists for the given procedure and drive, isn't that
compliance with the law?
Chad Fernandez
Michigan, USA
Bob George wrote:
> The problem isn't that a simple magnet "might" be good enough, it's that it
> is difficult to verify without a lot of effort. There's now legislation that
> penalizes companies significantly for improperly securing sensitive customer
> information. They're subject to auditors who will be looking for
> VERIFICATION that the data has been removed/wiped/destroyed. Remember, if
> you're going to make a case to business, "probably" won't be a good enough
> answer. The only way thay can be SURE the data is unrecoverable from the
> drive is either wiping -- a lengthy process -- or bashing the drive into
> bits. The auditors will always ask for "proof".
>
> As a hobbyist who'd like to get his hands on the stuff, I deplore the
> practice. As someone who's aware of their concerns, I have to agree that the
> business case for spending a few seconds with a hammer as opposed to several
> hours wiping the drives on equipment that's being disposed of is far
> stronger. What I HOPE happens is that they come up with an arrangement with
> an agency that will work out how to wipe the drives and load an unrestricted
> OS on it for use within the community.
To unsubscribe from SURVPC send a message to [EMAIL PROTECTED] with
unsubscribe SURVPC in the body of the message.
Also, trim this footer from any quoted replies.
More info can be found at;
http://www.softcon.com/archives/SURVPC.html
