Procedures to Control Remanence During
Surplussing/Declassification
of ADP Assets
Systems that have processed but not stored classified information
can be declassified through being subjected to a thorough disk
wiping procedure. By utilizing a Government approved program
similar to Norton Disk Wipe, the user can totally wipe the hard
disk clean of all information previously stored.
For floppies that have actually stored classified information,
the
same process is acceptable if the disk is to be reused. However,
the cleared disk must be protected, and can only be reused to
store
information at the same level of classification as it previously
held. For downgrading hard disks, two downgrade procedures are
allowed. After wiping, the user must physically inspect the disk
using Norton, and then certify that no data is present, or the
alternative is the ISs nonvolatile memory must be degaussed
before
it can be surplussed. Make sure the disk has first been at least
reformatted before degausing.
In Event of a Clearing Failure
In the event classified information is discovered on a reissued
hard drive, notify the NRL Security Office and the NRL IS
Security
Office immediately. In the event sensitive but unclassified
information is discovered, notify the NRL IS Security Office.
Upon notification, the security office will assign an
investigation to determine the source and extent of any potential
damages.
Destruction of IS resources
Storage and destruction of classified media is described in
OPNAVINST 5510.1F. Regarding destruction, IS storage media,
both
classified and unclassified, will be destroyed as soon as it is
no
longer required. Prior to destroying magnetic media, the media
should be degaussed. For the case of hard disk drives, the IS
Security Office is to be notified when disks (or systems) that
have
been approved for classified processing are to be replaced.