HomeResourcesMedia Destruction GuidanceFAQ

FAQ

Customer FAQ

Question Type 

Question 

Answer 

Guidance 

Do I have to destroy my storage device? Can't I reuse it? 

Unfortunately, you do have to destroy your drives. CSDSR has not approved any software erasure methods. Physical destruction is the only secure way to ensure your data is gone. For devices such as routers, switches, etc, contact your local security office. 

Guidance 

How do I dispose of my storage device once I've properly destroyed it? 

We recommend you recycle, but you are free to dispose of your non-classified debris in any manner. 

Guidance 

How do I dispose of my storage destruction machine once it reach it end of use?  

Thoroughly inspect the machine for storage device particulate that may not have been disposed of. Ensure that you perform a thorough search, Once complete, you may dispose in any manner you like. We recommend you recycle.   

EPL 

How often are new EPLs published? 

EPLS are expected to be published every quarter, but may be subjected to delays. 

Guidance 

I deguassed my hard drive, do I still need to destroy it? 

Yes, physically destroying a hard drive is an additional level of security and helps ensure that this drive is not accidentallly mistaken for a working drive. Note: Destruction does not replace deguassing. You MUST degauss your hard drive.  

Guidance 

What should I do with a HAMR Drive or MAMR Drive? 

These drives are still in development and aren't publicly available.  If you do have a HAMR drive or MAMR drive, you'll need to incinerate the drive to ash. No other method currently exists capable of securely sanitizing this data. 

Guidance 

I don't have access to any of the equipment on the EPLs.  Is there anywhere I can send my storage media? 

Yes! If you're an eligible entity, the NSA Classified Material Conversion (CMC) office may be able to help you. Please contact them at 301 688-6672 or vist them at https://www.nsa.gov/Resources/NSA-Classified-Materiel-Conversion-CMC/ for more information. If you are not eligable for their assistance, we recommend you purchase a unit on our EPL or find a service in your area to destroy your information for you; verify that any service you utilize complies with our EPL. 

EPL 

What Classification can x device destroy? 

All approved products on the EPL are capable of sanitizing TS/SCI material and below.  Any device not listed within the EPLs is not approved for DoD usage for material at any classified level.  

Guidance 

I have a shredder, or other device, in my office that isn't on the EPL. Can you add it? 

Potentially, but not instantly. The vendor of the device must initiate a request to have their device evaulated and CSDSR would need to perform a full examination of the device before we could make a determination. 

Guidance 

I have a printer, router, computer, switch or other piece of equipment. How do I sanitize that? 

Please contact the manufacturer and request a "statement of volatility." Follow the instructions contained within and remove all non-volatile storage from the device. If you cannot remove nonvolatile memory, then you must disintegrate the board.  Ensure volatile memory is sanitized by disconnecting the power for at least 24 hours. If you're in need of additional assistance, contact the CMC for guidance.  

Guidance 

Can I lower the classification level of my printer, computer, switch, or other hardware? 

Typically no, but you can contact your local security office for specific guidance.  

Guidance 

What about cell phones, Ipads, and Tablets? 

Batteries need to be removed. Batteries can explode if shredded. If possible, LCD screens should also be removed.  Disintegrate these devices utilizing a product on our SSD Disintegrator EPL. 

Policy 

Can I repair my EPL approved equipment? 

Please contact the manufacturer/vendor and ensure that the repair brings the device back to an "as stock" configuration.  Any alterations may invalidate the machine's approval. DoD 5200.01 V3 provides a little more information about this. 

Guidance 

I've had a data spill. What should I do with the affected hardware? 

Report the spill to your local security office and follow your organizations protocol. CSDSR requires the hardware to be destroyed in accordance with our EPLs. 

Policy/EPL 

My product was removed from the EPL, can I still use it? 

DoD 5200.01 V3 allows for a 6 year window for you use this product until you replace it. The expiration for this 6 year period will be listed in the EPL.  CSDSR does recommend you replace your device as soon as you can. 

 

Vendor FAQ

Question Type 

Question 

Answer 

Vendor Inquiry 

What is the evaluation Procedure 

Submit/Email product evaluation request to NSA CSDSR with product documentation. If NSA determines that an evaluation is worthwhile/warrented, CSDSR will submit for an MOA to be created for the vendor and the process will be started to have the equipment shipped to CSDSR. Once equipment is received CSDSR strives to have an 18 week turnaround time. 

Vendor Inquiry 

Can my product be approved for multiple types of media? 

Yes, but CSDSR must test your device against the requirements set for all types of media your device "destroys". If a product is tested for multiple devices, and it fails some of those devices, the device will not be approved or listed for those devices. The product will be approved for only the devices it sanitized to NSA/ CSS specifications. 

Vendor Inquiry 

Does the CSDSR evaulate Magentic Degausser? 

Yes, due to advances in hard disk drive technology NSA will no longer accept degaussers for evaluation with magnetic fields less than 30000 Gauss.  

Contact

For further information, contact us by writing a message through our contact form on the CSDSR webpage