[UK & EU Webinar] The Top 3 Data Sanitisation Challenges – And How to Overcome Them

Blancco Proprietary & Confidential. Do Not Copy or Distribute. Copyright © 2017 Blancco Oy Ltd. All rights reserved.
The Top 3 Data Sanitisation
Challenges – And How to
Overcome Them

Today’s Agenda
2
• Addressing today’s data centre challenges
• Destroy vs. erase – navigating through the sea of grey when it comes
to data protection requirements
• Most common use cases – best practices for audit controls
• Sanitising your SSDs – not all methods are created equal

Data Centre Consolidation Stat
https://federaltechnologyinsider.com/data-center-optimization-initiative-consolidation-cloud/Blancco Proprietary & Confidential. Do Not Copy or Distribute. Copyright © 2018 Blancco Oy Ltd. All rights reserved.
OMB and Federal Information Technology Acquisition Reform Act
(FITARA) guidelines state we should expect 60% of non-tiered data centres
closed and 25% of tiered data centers consolidated by 2018.
60%
of non-tiered data
centres will close
25%
of tiered data centress
will consolidate

Gartner recently predicted that
by 2021, 50 percent of data
centers will use SSAs for
high-performance computing
and big data workloads – up
from less than 10 percent today.
NVMes Become the Interface for
Enterprise Drives
50%
of data centres will use
SSAs by 2021

Data Relocation Needs to be
Secure and Efficient
Gartner suggests that 70% of
data center migrations will
experience significant time delays
or even unplanned downtime,
largely due to improper planning.
70%
of data centre migrations
will experience delays

Let’s hear from you!
6
See note for poll question
to put in ReadyTalk

Security vs. Operations
Efficient & clean
operations for end-of-life
Security & compliance
demands for data
across the entire
lifecycle.

Data Protection in the Data Centre
Local/National

Poll Question
9
to put in ReadyTalk

Storage Security Needs Evidence
of Sanitisation
10
Proof of sanitisation takes on at
least two forms:
1. an audit log trail and
2. a certificate of sanitisation
The controller shall have the
obligation to erase personal
data without undue delay

Poll Question
11
to put in ReadyTalk

According to …
What is Data Sanitisation?
Data sanitisation is the consistently applied,
disciplined process of reliably and
completely removing all data from a
read/write medium so that it can no longer be
read or recovered.
Verify
Certify
Select

What methods
achieve it?
Data Sanitisation
Data
Erasure
Cryptographic
Erasure
Data
Destruction

To achieve data sanitisation, these
methods must:
1. Degaussing
2. and/or Mechanical Shredders
3. Audit Report
1. Select a specific standard
2. Verify the overwriting methodology removed data
across the entire device
3. Produce tamper-proof certificate
1. Find and overwrite crypto keys and password
2. Verify the data encrypted and the previous key
unrecoverable
3. Produce a tamper-proof certificate
Physical
Destruction
Cryptographic
Erasure
Data
Erasure

Poll Question
15
to put in ReadyTalk

or +

How Organisations Manage End-of-Life
Data Today
17
Insecure &
Recoverable Data
Secure & Reliable
Secure &
Reliable

Top 3 Data Sanitisation
Challenges

Data Centre Use Cases - Two Dimensions
• Data migration
• Customer Exit- Cloud Exit
• VM life cycles
• Repurposing system storage
• Temporary data
• Data retention policies
Erase Data from an operational
environment
• Data Center decommissioning
• Tech refresh
• End of lease
• Return test systems
• Break fix (RMA)
Erase entire systems or servers
on drive level
• Break fix (RMA)
• Repurposing system storage
• Data Centre decommissioning
19

Challenge #1:
Server decommissioning
manual and time consuming

Poll Question
21
to put in ReadyTalk

Best Practice:
Implement a scalable, automated
process to decrease time and
resources needed

Server decommissioning
example:
• 856 Servers
Decommissioned Overnight
• Each server had 6x1TB SATA
HDD. Total 5117 drives
• Erasure time was 5-8 hours.
Total time from start (boot
up) to finish (report
collection): 10 hours
• Erasure method was NIST
800-88 Clear
23

Challenge #2:
Sanitising advanced media,
like NVMe
Image Credit: Unlocked/NeweggBlancco Proprietary & Confidential. Do Not Copy or Distribute. Copyright © 2018 Blancco Oy Ltd. All rights reserved.

Poll Question
25
to put in ReadyTalk

Challenges with SSD Erasure
26
Blancco Patented Solution
1. Freeze lock Removal
2. Proprietary Erasure Sequence
i. Combines SW overwrite and FW commands
3. Erasure Validation
i. Identifies malfunctions and preformed processes
SSD Challenges
• Freeze Locks
• Wear Leveling
• Data Compression
• Unreliable Firmware
Commands
• Corrupted Blocks
• Secure-Erase

Best Practice:
If erasing SSDs, move to an NIST Purge
Standard, if supported by the drive. If not,
fallback should be NIST Clear.

Challenge #3:
Sanitisation process
in a live environment

Poll Question
29
to put in ReadyTalk

Security controls for cloud computing and
protection of personal data in the cloud
30
ISO 27018: Protection of privacy and personal data in the cloud –
IMPLEMENTED in H2 2014
Includes:
• Cloud provider should enable the right to erase personal data.
• Cloud provider should securely erase any temporary files in systems.
• Cloud provider should ensure that whenever data storage space is re-assigned,
previously residing data is not recoverable.
ISO 27017: Security controls for cloud computing
• Estimated to be in place by H1 2015.
• Will affect Cloud Service Providers on an even broader level than the ISO 27018.

Logical Level Erasure:
for Unix and Windows Environments
31

What We Do:
About Us
32
Standards
We Support:
Some of
Our Customers:
Erase a
Laptop or Server
Erase
iPhone Devices
Diagnose
iPhone Devices
Erase Secure
Active Files
Erase a
Virtual Machine
Erase a
SAN Server

We have the certifications to prove our
solutions meet highest standards.
33
The Polish Internal
Security Agency
Common Criteria
(ISO15408)
Swedish Armed
Forces
Netherlands Comms
Security Agency
NATO UK Comms Electronic
Security Group
German BSIUSA Department
of Defense
Certification Sécurité
de Premier Niveau
TüV-SüD UK Defense INFOSEC Norwegian National
Security Authority
Japan’s Refurb. IT
Equipment Association
Czech NSA National Assoc. for
Information Destruction
UK Asset Disposal &
Information Security Alliance
Netherlands Comms
Security Agency

And help you prove compliance with auditors.
According to the Cloud Security Alliance, falls to “…the provider to keep that data secure,
and when it is deleted, the provider should ensure (or be able to prove) that it is
permanently destroyed.”

Russ Ernst
VP Product Development
russ.ernst@blancco.com
Matthew Anderson
Global Director – OEM & BD
matthew.anderson@blancco.com
Questions?
Schedule a Free Strategy Session
https://www.blancco.com/demo/
free-strategy-session-data-center/

[UK & EU Webinar] The Top 3 Data Sanitisation Challenges – And How to Overcome Them

Recommended

Recommended

More Related Content

What's hot

What's hot (11)

Similar to [UK & EU Webinar] The Top 3 Data Sanitisation Challenges – And How to Overcome Them

Similar to [UK & EU Webinar] The Top 3 Data Sanitisation Challenges – And How to Overcome Them (20)

More from Blancco

More from Blancco (11)

Recently uploaded

Recently uploaded (20)

[UK & EU Webinar] The Top 3 Data Sanitisation Challenges – And How to Overcome Them

Editor's Notes