Best Practices: Provisioning, Encryption and Decommission of storage in the enterprise

» Types of storage we need to be concerned about  HDD, SSD Drives  USB Flash Drives  Removable Media (SD, CF, FDD, CD/DVD, Camera, Smart Phones, Tablets)  Copier/Printer HD  Optical & Tape Drives  Employee Owned Devices (GPS, MP3, etc)

» Provisioning Devices  Catalog as an asset (M/N, S/N, Asset Tag) and to whom it was assigned  Secure Format (DOD Wipe, Zero Wipe, etc)  Encrypt Device  Include potential risks/vulnerabilities in assessment documents  Maintain approved device list

» Workstation Backup and Restoration  Secure cloud backup  Point in time recovery of individual files  Device Location Services  Access from any device  Backup of the backup (and secure disposition of said backup eg: off-site vault, vendor, etc.)

» Secure Decommission  Secure Format (DOD Wipe, Zero Wipe, etc)  Decommission/Un-assign asset-user  Degauss (Magnetic Erase)  Physically Destroy Device  Maintain disposition documentation

» Conclusion  Know where your storage is  Keep data safe from exploitation  Define regulatory policies/procedures  Keep a well documented list of what happened to decommissioned media  When in doubt, encrypt it