B&L Associates

Ensuring security, compliance in data destruction processes

February 8, 2012

Corporate IT managers feeling the pressure of big data are starting to reassess the relevance of the information stored on their systems. But before moving forward with data consolidation plans, it is important to consider the security and compliance implications of record deletion procedures.

Media management professionals in many industries have been shifting to a more conservative storage strategy in recent years. With data audits and eDiscovery requests potentially calling for access to files created decades ago, tape and vault management strategies have become all-inclusive in many cases. Unfortunately, this approach is no longer sustainable as the influx of big data continues to stretch the upper limits of capacity.

The good news is this development has forced data managers to take a closer look at the relevance - as opposed to merely the volume - of the records they retain. In a number of cases, companies are finding out that industry compliance regulations only mandate the preservation of certain data sets, and often for a set duration.

According to InfoWorld, this means that more IT departments will be overwriting, degaussing or physically destroying storage media to consolidate resources. Each approach has its own unique cost considerations and reliability record, but the need for employing proper security precautions holds constant for all three procedures.

One of the most prevalent risks associated with data destruction procedures is identity theft.

"How you dispose of confidential records is just as important as how you stored them when they were current," according to analysts from the Alexander Hamilton Institute. "Simply placing them in the trash is just as risky as leaving them in unlocked files."

As a result, the information security researchers advise approaching data destruction processes with the same diligence as storage strategies. Identifying the most sensitive content, restricting employee access and documenting accountability will help provide a paper trail for internal and external auditors and ensure records do not accidentally get lost in the shuffle and exposed to unauthorized viewers.