+CON.6.A13 Destruction of Defective Digital Storage Media (S)

CON.6.A13 Destruction of Defective Digital Storage Media (S)

If, due to a defect, digital storage media containing sensitive information cannot be securely deleted in accordance with the applicable procedures for deleting storage media, they SHOULD be destroyed in accordance with security level 3 (at minimum) of ISO/IEC 21964-2.

In the event that defective storage media are replaced or repaired instead, it SHOULD be contractually agreed with the service provider contracted for this purpose that these media will be securely deleted or destroyed by the service provider. The service provider's procedures SHOULD at least meet the organisation's internal requirements for deletion and destruction procedures.

1. Overview

Summary Standard

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements
Source Requirement

3. Related Regulations

Regulations
Source Regulation

Linked Issues