Guidelines for Media Sanitization

Kissel, Richard; Regenscheid, Andrew; Scholl, Matthew; Stine, Kevin

doi:https://doi.org/10.6028/NIST.SP.800-88r1

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

NIST SP 800-88 Rev. 1

Guidelines for Media Sanitization

Documentation Topics

Date Published: December 2014

Supersedes: SP 800-88 (09/01/2006)

Planning Note (03/27/2023): Send inquiries about this publication to sp800-88-comments@nist.gov.

Author(s)

Richard Kissel (NIST), Andrew Regenscheid (NIST), Matthew Scholl (NIST), Kevin Stine (NIST)

Abstract

Media sanitization refers to a process that renders access to target data on the media infeasible for a given level of effort. This guide will assist organizations and system owners in making practical sanitization decisions based on the categorization of confidentiality of their information.

Keywords

media types; mobile devices with storage; crypto erase; secure erase; media sanitization; sanitization tools and methods; ensuring confidentiality

Control Families

Maintenance; Media Protection; Risk Assessment

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-88r1
Download URL

Supplemental Material:
Sample "Certificate of Sanitization" from Appendix G (docx)

Document History:
12/17/14: SP 800-88 Rev. 1 (Final)

Topics

Security and Privacy

general security & privacy, maintenance, risk assessment

Technologies

storage

Laws and Regulations

Federal Information Security Modernization Act, OMB Circular A-130