News in the Channel - issue #20

DATA DESTRUCTION

Clean slate With the proliferation in data in recent years – as well as legislation – data destruction has become ever-more important, but it must be done to certain standards and this presents plenty of opportunities for resellers and MSPs.

The amount of data being produce by businesses has increased massively in recent years, with the advent of technologies that can record levels of detail that just wasn’t possible a few years ago. But that also means there is more data that needs to be disposed of when it is no longer of use – be it physical or digital – and this must be done effectively and confidentially to avoid the risk of a data breach. “The sanitisation of data is important to any organisation, especially with the increase in cybersecurity incidents and the omnipresent concern of data mining and theft,” says Richard Shea, service development manager at Salvation Army Trading Company (SATCoL). “Protecting data is essential. The damage that can be inflicted on an organisation if information is stolen or used maliciously can have a huge impact.” Jim Elder, vice president of Global Pathways Blancco, agrees. “Data destruction is more critical than ever as organisations grapple with the challenge of managing increasing volume of data in the AI and cloud era,” he says. “As businesses collect and store more data, the risk of a data beach or non-compliance with data protection regulations increases. For example, in Blancco’s Data at a Distance research study, 65% of cloud adopters reported an increased volume of ROT (redundant, obsolete and trivial) data collection.” He adds that while many organisations are aware of the need for end-of-life data destruction, work remains to continue closing the knowledge gap on what data should be destroyed, how it should be done, when and by whom. “Without mature data classification and management policies, businesses may inadvertently retain sensitive information longer than necessary, exposing themselves to potential breaches and legal liabilities,” he says. Steve Rains, managing director of Gentronics, notes data destruction is crucial for businesses of all sizes. “Failing to dispose of data properly can lead to substantial fines

from the Information Commissioner’s Office and significant damage to a company's reputation,” he says. “However, the perceived risks and approaches to data destruction can vary considerably, depending on an individual’s expertise and risk management perspective.

“Many business professionals find it challenging to understand the current

standards for data destruction, often resorting to physical destruction as a low-risk solution. Although physical destruction is effective, it does not align with environmentally sustainable practices that promote product reuse. The most up-to-date and widely accepted data destruction standards that promote reuse are NIST 800-88 and the newer IEEE 2883, whereas older standards like DoD 5220.22 and HMG Infosec Level 5 are now considered outdated. “IT service organisations, such as Gentronics, are ideally positioned to deliver comprehensive data destruction services. Providers offer various secure data removal options tailored to the customer's data security requirements while retaining interest in sustainable product reuse. Additionally, they maintain a full audit chain and Chain of Custody, ensuring complete transparency and security throughout the data destruction process. “Managed service providers (MSPs) have options: they can partner with these organisations to provide a complete end-to-end solution for their clients, or they can invest in the necessary technology and processes to offer data destruction services themselves.” Primary destruction methods There are three primary methods of data destruction: data erasure (overwrite), degaussing and shredding (physical destruction). “Each method has its advantages and disadvantages,” says Steve: “Data erasure uses advanced software or hardware to

Richard Shea service development manager

satcol.org

Finding a provider that can offer the

right methods of data destruction as well as great service is the key.

368

Powered by