Skip to content

Degaussing

What is Degaussing?

The process of eliminating data from magnetic storage media by exposing it to a strong magnetic field, rendering the data unrecoverable.

Information Security

Terms that appear alongside degaussing

Each of these is named in at least one of the same controls as degaussing. The number is how many controls name both.

Frameworks that govern degaussing

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on degaussing

Requirements naming degaussing across 6 standards, quoted from the control text.

NIST SP 800-88 Rev 13 controls

Degaussing exposes magnetic media to a strong magnetic field, rendering it unreadable. The degausser must be rated for the media coercivity. Degaussing renders most drives non-functional and does not work on SSDs or flash.

MS-PURGE-6 · Degaussing of Magnetic Media →
IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1)1 control

NSS-17 + NSS-42-G require physical protection + lifecycle management + safety/EP integration. Physical protection of CBS: equipment in secure compartments + control rooms + protected areas per CSL (CSL 1 in Vital Area or Inner Area per physical protection);

IAEA-NSS17-Physical-Lifecycle-Decommissioning-Safety-Emergency · IAEA NSS-17 - Physical Protection of Computer Systems + Lifecycle + Decommissioning + Safety + Emergency Preparedness Interface →
IRS Publication 10751 control

Sections 9.1-9.2 of IRS Publication 1075 establish FTI-specific requirements that are NOT covered by NIST SP 800-53 but are specific to the IRS FTI protection regime.

IRSPub1075-Section91-92-FTI-Specific-Recordkeeping-Disclosure-Transmission-Restriction-MinSafeguards · IRS Publication 1075 Sections 9.1-9.2 + FTI-Specific Requirements + Recordkeeping + Disclosure Restrictions + Transmission Requirements + Minimum Protection Standards + Printing + Inventory + Destruction →
ISMAP (Japan)1 control

ISMAP Data Protection establishes comprehensive data lifecycle controls. (1) Data Classification: customer government data must be classified per Japanese government data classification scheme + including (a) General + (b) Sensitive + (c) Confidential + (d) St...

ISMAP-DataProtection-Classification-Encryption-DataResidencyJapan-Backup-SecureDeletion-Cryptography-FIPS · ISMAP Data Protection - Data Classification + AES-256 Encryption At Rest + TLS 1.3 In Transit + Data Residency Japan + Backup + Secure Deletion + Cryptography per FIPS 140-3 + CRYPTREC + KMS HSM →
NIST SP 800-881 control

Apply the three NIST SP 800-88 Rev 1 sanitization method categories per Chapter 2 (Background) Section 2.5. Clear (Section 2.5.1): applies logical techniques to sanitize data in all user-addressable storage locations for protection against simple non-invasive...

NISTSP88-2 · Sanitization Method Categories: Clear, Purge, Destroy →
New Zealand Information Security Manual (NZISM)1 control

Apply NZISM Chapter 16 Media Handling and Destruction including classification-appropriate destruction (degaussing for classified magnetic media + shredding for paper + physical destruction for non-magnetic).

NZISM-7 · Media Handling, Outsourcing, Cloud Services, and Remote Access →

Questions people ask about degaussing

What is Degaussing?
The process of eliminating data from magnetic storage media by exposing it to a strong magnetic field, rendering the data unrecoverable.
Why is Degaussing important for compliance?
Degaussing is a key concept in Information Security. Understanding degaussing helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Degaussing?
Degaussing appears in the requirement text of NIST SP 800-88 Rev 1, IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1), IRS Publication 1075, ISMAP (Japan), NIST SP 800-88. Across these standards we have identified 8 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Degaussing?
Explore our compliance framework pages to see how degaussing applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Degaussing applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.