80 likes | 235 Views
Best Practices: Provisioning, Encryption and Decommission of storage in the enterprise. Enterprise Storage Lifecycle Management. Types of storage we need to be concerned about HDD, SSD Drives USB Flash Drives Removable Media (SD, CF, FDD, CD/DVD, Camera, Smart Phones, Tablets)
E N D
Best Practices: Provisioning, Encryption and Decommission of storage in the enterprise Enterprise Storage Lifecycle Management
Types of storage we need to be concerned about • HDD, SSD Drives • USB Flash Drives • Removable Media (SD, CF, FDD, CD/DVD, Camera, Smart Phones, Tablets) • Copier/Printer HD • Optical & Tape Drives • Employee Owned Devices (GPS, MP3, etc)
Provisioning Devices • Catalog as an asset (M/N, S/N, Asset Tag) and to whom it was assigned • Secure Format (DOD Wipe, Zero Wipe, etc) • Encrypt Device • Include potential risks/vulnerabilities in assessment documents • Maintain approved device list
Workstation Backup and Restoration • Secure cloud backup • Point in time recovery of individual files • Device Location Services • Access from any device • Backup of the backup (and secure disposition of said backup eg: off-site vault, vendor, etc.)
Secure Decommission • Secure Format (DOD Wipe, Zero Wipe, etc) • Decommission/Un-assign asset-user • Degauss (Magnetic Erase) • Physically Destroy Device • Maintain disposition documentation
Conclusion • Know where your storage is • Keep data safe from exploitation • Define regulatory policies/procedures • Keep a well documented list of what happened to decommissioned media • When in doubt, encrypt it