Secure Destruction
What is Secure Destruction?
The complete and irreversible elimination of data and storage media through approved methods such as shredding, incineration, or degaussing.
Frameworks that govern secure destruction
What the standards actually require on secure destruction
Requirements naming secure destruction across 6 standards, quoted from the control text.
Schedule 1, 4.5.3: information no longer required must be destroyed, erased or made anonymous; guidelines and procedures governing destruction are required.
PIPEDA-4.5.3 · Secure Destruction and Retention →Agencies must use an approved secure disposal or destruction facility to destroy media and IT equipment.
new-zealand-information-security-manual-nzism::13.6.12.C.01 · 13.6.12.C.01 Use approved secure destruction facility for media →Physical assets holding classified information, including paper and storage media, are securely destroyed or reused.
saudi-nca-ecc::2-14-3-4 · 2-14-3-4 Secure destruction and reuse of assets holding classified information →Management plans for each system's life cycle and end of life, with policies for hardware and software life cycles, inventories of systems and applications, an approved sunset policy, tracking of changes, update availability and vendor end of support, risk ass...
ffiec-it-examination-handbook::IS-II.C.11 · II.C.11 End-of-Life Management (Information Security) →Sections 9.1-9.2 of IRS Publication 1075 establish FTI-specific requirements that are NOT covered by NIST SP 800-53 but are specific to the IRS FTI protection regime.
IRSPub1075-Section91-92-FTI-Specific-Recordkeeping-Disclosure-Transmission-Restriction-MinSafeguards · IRS Publication 1075 Sections 9.1-9.2 + FTI-Specific Requirements + Recordkeeping + Disclosure Restrictions + Transmission Requirements + Minimum Protection Standards + Printing + Inventory + Destruction →The information security requirements that matter for each supplier are to be set and agreed with that supplier, depending on the type of relationship. Purpose: make the agreed security level in each supplier relationship enforceable.
iso-27002-2022::5.20 · Addressing information security within supplier agreements →Questions people ask about secure destruction
What is Secure Destruction?
Why is Secure Destruction important for compliance?
Which compliance frameworks address Secure Destruction?
Where can I learn more about Secure Destruction?
See how Secure Destruction applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.