Who is Forensic Erase Verification relevant to?
Chief Information Security Officer (CISO), Chief Privacy Officer, IT Manager
What is forensic erase verification
The Stellar Forensic Erase Verification Service is an audit service provided by Stellar. Stellar acts as a “third party” and, at the client’s request, makes a statement about the outcome of an erasure process. It checks whether the data carrier has been erased in accordance with standardised norms. The service provides third-party assurance regarding companies’ information security and privacy policies.
Why let Stellar test your data?
Secure erasure of hard disks and SSDs formally consists of two steps; the “wiping” or “purging” and then the forensic verification of this erasure process. Without verification, there is no secure erasure. Without verification, there is no conclusive evidence that the data has actually been securely erased. A verification procedure is therefore necessary. Optionally, verification can be done completely or in batches. The Stellar forensic verification service is used by companies for the batch verification of their erased data carriers by an independent third party.
Also when outsourced to an IT asset disposition
Even when IT Asset Disposition is outsourced, it is necessary to have the results of the service verified by a third party such as Stellar.
Test method
Stellar uses the NIST800-88r1 classification as the basis for the audit and employs forensic and data recovery methods and techniques to reach its conclusion. Stellar also uses its own specialised data recovery knowledge, laboratory tools and techniques. Depending on the desired security level, these methods and techniques can be non-invasive/invasive or non-destructive/destructive in nature. Depending on the desired level of investigation, research is conducted at a logical and/or physical level. Especially the latter is often overlooked by implementers, as a result of which important data, which cannot be made visible with software tools, are still on the data carrier. A thorough inspection at physical level including all hidden and normally locked parts of the data carrier eliminates the latter risk.
What does forensic erase verification deliver?
The verification service provides an official document (a statement) with a detailed statement from Stellar about the erasure result. The document describes the task, the desired level of security tested, the test methods used and Stellar’s opinion of the test results. The document is dated and signed by an authorized officer of Stellar Data Recovery and supplements the company’s audit trail.
Which storage media are tested by Stellar?
Stellar tests hard drives and flash storage media such as ssd’s, sd-cards, usb sticks, micro sd’s, etc.
When to engage Stellar
Engage Stellar immediately after data destruction procedures have been carried out. Call 030 7600 701 or email info@stellar.nl. Pricing.