RECMGMT-L Archives

Records Management

RECMGMT-L@LISTSERV.IGGURU.US

Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Jesse Wilkins <[log in to unmask]>
Reply To:
Records Management Program <[log in to unmask]>
Date:
Thu, 11 Jun 2009 12:25:48 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (59 lines)
The exact reference in DoD 5015.2 v3 (April 2007) is as follows: "C2.2.7.6.3.
 Delete electronic records approved for destruction in a manner
that prevents their physical reconstruction using commonly available file
restoration utilities (part 1234.34 of Reference (g))." Reference g here is
Title 36 of the CFR, so you can read the full cite by Googling "36 CFR
1234.34"; but I'm not sure that here that means forensically unrecoverable.
Here's the complete contents of the text:
1234.34 - Destruction of electronic records.

Electronic records may be destroyed only in accordance with a records
disposition schedule approved by the Archivist of the United States,
including General Records Schedules. At a minimum each agency shall ensure
that: (a) Electronic records scheduled for destruction are disposed of in a
manner that ensures protection of any sensitive, proprietary, or national
security information.

  (b) Magnetic recording media previously used for electronic records
containing sensitive, proprietary, or national security information are not
reused if the previously recorded information can be compromised by reuse in
any way.

  (c) Agencies shall establish and implement procedures that specifically
address the destruction of electronic records generated by individuals
employing electronic mail

The thing is that I assume recovering from the Recycle Bin is "too
recoverable" - but I know at least one DoD certification tester is on the
list - perhaps one or more of them can weigh in here?

Also, WRT the oft-cited requirement under DoD5220 for multiple overwrites to
ensure forensic nonrecoverability, there was a great article on Softpedia
and another on Law.com by Craig Ball, a well-respected expert and special
master in e-discovery, that addresses the so-called "Gutmann method".
Wikipedia's article is very good too.

Here are links:
1. Softpedia
http://news.softpedia.com/news/Data-Wiping-Myth-Put-to-Rest-102376.shtml or
http://is.gd/Z1KC
2. Wikipedia
http://en.wikipedia.org/wiki/Gutmann_method or
http://is.gd/Z1LZ
3. Law.com
http://www.law.com/jsp/legaltechnology/pubArticleLT.jsp?id=1202429342339 or
http://is.gd/Z1MD

-- 
Regards,

Jesse Wilkins
[log in to unmask]
blog: http://informata.blogspot.com
Twitter: http://www.twitter.com/jessewilkins

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]

ATOM RSS1 RSS2