Hi Peter, 

We're violently agreeing I think. My point is that best practice to date for
destroying electronic records to ensure they cannot be forensically
recovered - that is, the analogy to shredding - has been physical
destruction of the media. This doesn't work for the reasons we've both cited
as well as at least one other - it doesn't scale. 

The alternative that I am aware of that meets the need for complete,
non-recoverable destruction is the one noted involving encryption at point
of storage and nonrecoverable destruction of the decryption key at the end
of the retention period (usual considerations about legal holds etc.
applied). 

And I absolutely agree with your other point. 

Jesse Wilkins, CRM
[log in to unmask]
(303) 574-0749 direct
Twitter: http://www.twitter.com/jessewilkins

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]