What's the Best Way to Safely Erase HDDs for ISO 27001 Compliance?
Asked by
CuriousCoder27
I'm currently working with an old HP server to erase disks using O&O SafeErase, but the reporting functionality isn't meeting our expectations. This issue was pointed out in our last ISO 27001 audit, so I'm on the lookout for better alternatives that can securely wipe drives while also providing comprehensive reports. What solutions have you tried that effectively meet these requirements?
Answers
One of the safest methods is to send the drives off for shredding. There are companies that even provide video confirmation or can shred them on-site. It definitely satisfies the legal requirements, which is a plus for compliance audits. Just remember, you might lose good working hardware that way, but it's a sure bet for security.
Reply to this answer
I recommend checking out Parted Magic if you're only dealing with desktops. It boots into a Linux environment that has various erase options and generates a report with the serial numbers of the drives wiped. We find it sufficient for our ISO 27001 compliance. If you need top-level security, though, sending the drives to a certified shredder is the gold standard.
DataDude42: Parted Magic sounds handy! I’ll definitely check that out and see if it fits our needs.
Reply to this answer
Sending drives to a certified shredder is a solid option. You get the necessary certification, which ticks off the compliance box.
Reply to this answer
For basic wiping, I use Parted Magic too, but when it comes to HDDs, we just destroy them physically. It’s straightforward and eliminates any chance of data retrieval.
Reply to this answer
We've been using Killdisk for our drives. It does three passes with a verification process and provides a report, which is essential for satisfying auditors. Plus, it prints a label for each drive once the process is done. We're racking up a collection of drives that still need proper physical destruction, though.
Reply to this answer
Add your answer
Answers are reviewed before publication.
DriveWatcher85: Watching drives get shredded is a wild experience! We used to have a truck come by, and it was quite the show as the drives tumbled out. Just a heads-up though, we always wipe the data before shredding to cover all bases.
DataSaver30: True! While shredding is secure, it feels wasteful. Sometimes I wish we could repurpose those drives instead.