Data Destruction
What is Data Destruction?
The process of permanently and irreversibly eliminating data stored on electronic media so that it cannot be recovered. Methods include degaussing, physical destruction, and cryptographic erasure.
Frameworks that govern data destruction
What the standards actually require on data destruction
Requirements naming data destruction across 6 standards, quoted from the control text.
The bank documents and communicates strategies for advanced attacks such as ransomware and cyber extortion, data destruction and DDoS.
rbi-cybersecurity-framework-for-banks::179 · Para 179: documented strategies for ransomware, data destruction and DDoS →When data is destroyed on termination or migration of the service, all data relating to the customer is destroyed with deletion methods that prevent recovery.
south-korea-cloud-security-assurance-program-csap::12.1.6 · Data destruction →Keep approved procedures for securely disposing of equipment used away from company premises, and where equipment is not physically destroyed, apply a data destruction method that makes recovery impossible. Review at least annually.
CCM-DCS-01 · Off-Site Equipment Disposal Policy and Procedures →Policies and procedures govern how equipment used away from the organisation's premises is securely disposed of. Equipment that is not physically destroyed must go through a data destruction method that makes the information unrecoverable.
cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::DCS-02 · Off-Site Equipment Disposal Policy and Procedures →Article 6(1) sets the recoverable damage categories: (a) death or personal injury, including medically recognised damage to PSYCHOLOGICAL health; (b) damage to or destruction of any property other than the defective product itself;
PLD-Art.6 · Categories of damage covered (PLD Article 6) →Recovery scenarios include recovering from data destruction and from impacts on data integrity, data loss and the availability of systems and data.
ffiec-cybersecurity-assessment-tool-cat::D5.IR.Te.E.1 · D5.IR.Te.E.1 Testing (Evolving 1) →Questions people ask about data destruction
What is Data Destruction?
Why is Data Destruction important for compliance?
Which compliance frameworks address Data Destruction?
Where can I learn more about Data Destruction?
See how Data Destruction applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.