|
Question Type
|
Question
|
Answer
|
|
Guidance
|
Do I have to destroy my storage device? Can't I reuse it?
|
Unfortunately, you do have to destroy your drives. CSDSR has not approved any software erasure methods. Physical destruction is the only secure way to ensure your data is gone. For devices such as routers, switches, etc, contact your local security office.
|
|
Guidance
|
How do I dispose of my storage device once I've properly destroyed it?
|
We recommend you recycle, but you are free to dispose of your non-classified debris in any manner.
|
|
Guidance
|
How do I dispose of my storage destruction machine once it reach it end of use?
|
Thoroughly inspect the machine for storage device particulate that may not have been disposed of. Ensure that you perform a thorough search, Once complete, you may dispose in any manner you like. We recommend you recycle.
|
|
Guidance
|
I deguassed my hard drive, do I still need to destroy it?
|
Yes, physically destroying a hard drive is an additional level of security and helps ensure that this drive is not accidentallly mistaken for a working drive. Note: Destruction does not replace deguassing. You MUST degauss your hard drive.
|
|
Guidance
|
What should I do with a HAMR Drive or MAMR Drive?
|
These drives are still in development and aren't publicly available. If you do have a HAMR drive or MAMR drive, you'll need to incinerate the drive to ash. No other method currently exists capable of securely sanitizing this data.
|
|
Guidance
|
I don't have access to any of the equipment on the EPLs. Is there anywhere I can send my storage media?
|
Yes! If you're an eligible entity, the NSA Classified Material Conversion (CMC) office may be able to help you. Please contact them at 301 688-6672 or visit them at https://www.nsa.gov/Resources/NSA-Classified-Materiel-Conversion-CMC/ for more information. If you are not eligable for their assistance, we recommend you purchase a unit on our EPL or find a service in your area to destroy your information for you; verify that any service you utilize complies with our EPL.
|
|
Guidance
|
I have a shredder, or other device, in my office that isn't on the EPL. Can you add it?
|
Potentially, but not instantly. The vendor of the device must initiate a request to have their device evaulated and CSDSR would need to perform a full examination of the device before we could make a determination.
|
|
Guidance
|
I have a printer, router, computer, switch or other piece of equipment. How do I sanitize that?
|
Please contact the manufacturer and request a "statement of volatility." Follow the instructions contained within and remove all non-volatile storage from the device. If you cannot remove nonvolatile memory, then you must disintegrate the board. Ensure volatile memory is sanitized by disconnecting the power for at least 24 hours. If you're in need of additional assistance, contact the CMC for guidance.
|
|
Guidance
|
Can I lower the classification level of my printer, computer, switch, or other hardware?
|
Typically no, but you can contact your local security office for specific guidance.
|
|
Guidance
|
What about cell phones, Ipads, and Tablets?
|
Batteries need to be removed. Batteries can explode if shredded. If possible, LCD screens should also be removed. Disintegrate these devices utilizing a product on our SSD Disintegrator EPL.
|
|
Guidance
|
I've had a data spill. What should I do with the affected hardware?
|
Report the spill to your local security office and follow your organizations protocol. CSDSR requires the hardware to be destroyed in accordance with our EPLs.
|
|
Policy
|
Can I repair my EPL approved equipment?
|
Please contact the manufacturer/vendor and ensure that the repair brings the device back to an "as stock" configuration. Any alterations may invalidate the machine's approval. DoD 5200.01 V3 provides a little more information about this.
|
| EPL |
How often are new EPLs published?
|
EPLS are expected to be published every quarter, but may be subjected to delays.
|
| EPL |
What Classification can x device destroy?
|
All approved products on the EPL are capable of sanitizing TS/SCI material and below. Any device not listed within the EPLs is not approved for DoD usage for material at any classified level.
|
|
Policy/EPL
|
My product was removed from the EPL, can I still use it?
|
DoD 5200.01 V3 allows for a 6 year window for you use this product until you replace it. The expiration for this 6 year period will be listed in the EPL. CSDSR does recommend you replace your device as soon as you can.
|