In Depth

Data Breaches Spark Hard Drive Shredding Boom

This is a great time to be in the hard-drive shredding business, as companies scramble to destroy data before the bad guys have a chance to steal it. A look inside the belly of the beast (includes video).

By Bill Brenner, Senior Editor

Page 3

"As breaches have occurred and the private sector has become more security aware, our growth has been tied to people finding us and seeing that we comply with federal standards," he says.

Indeed, all of SEM's technology has the U.S. National Security Agency seal of approval and the company is fully insured. The destruction process is carefully monitored around the clock with an array of video cameras. Customers are allowed to stay and witness the destruction if they wish, or they can watch remotely from the Web.

Pros and cons
Most of the security experts contacted for this story described themselves as pro-shredding, including Doc Farmer, senior security specialist at InfoSec Inc. Others are skittish about entrusting the process to outsiders.

"I'm definitely in the pro-shredding camp, and have set up policies, standards and procedures for same in past jobs," Farmer says. "Generally, I've not known a company to do this as a business. It's always been handled internally from my experience. But considering how many data breaches have occurred recently," it's probably something worth investing in, he says.

Typically, Farmer only shreds disks that were going out the door anyway, such as when old PCs were being scrapped or donated. "I'd set up simple batch files on a bootable diskette with a copy of BCWipe.exe on it, reboot the PC and nuke the hard drive at DoD levels, which was and remains sufficient for 99.9 percent of all situations," he says.

Benoit H. Dicaire, a Montreal-based information security strategist for consultancy INFRAX Inc., is more skeptical.

"You need evidence of the destruction," he says. "It's easier to do it in-house. Just the thought of transporting the gears from the corporate site to the destruction site makes me shiver."

Other stories by Bill Brenner

Data breach

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Security Directions: A Virtual Conference

Security Directions Available On Demand Sept. 30 - Dec. 30

Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.

» Register Now

WEBCAST
Protecting PII: How to Work with IT to Manage Risk

Compuware Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.

» View this Webcast

Featured Sponsors