Media Sanitization Level
Jump to navigation
Jump to search
A Media Sanitization Level is a security assurance level that defines the degree of data removal effectiveness for storage media.
- AKA: Sanitization Security Level, Data Erasure Level, Media Clearing Level, Sanitization Assurance Level, Data Removal Level.
- Context:
- It can typically correspond to Threat Models and adversary capabilitys.
- It can typically determine Sanitization Method Selection and sanitization tool requirements.
- It can typically align with NIST SP 800-88 three-tier classification system.
- It can often dictate Media Reuse Possibility and disposal options.
- It can often influence Sanitization Cost and time requirements.
- It can range from being a Basic Media Sanitization Level to being a Maximum Media Sanitization Level, depending on its security assurance degree.
- It can range from being a Logical Media Sanitization Level to being a Physical Media Sanitization Level, depending on its sanitization approach type.
- It can range from being a Reversible Media Sanitization Level to being an Irreversible Media Sanitization Level, depending on its data recovery possibility.
- It can range from being a Quick Media Sanitization Level to being a Comprehensive Media Sanitization Level, depending on its sanitization thoroughness.
- It can integrate with Risk Assessment Frameworks for appropriate level selection.
- It can support Compliance Frameworks through defined security standards.
- ...
- Examples:
- NIST Media Sanitization Levels, such as:
- Alternative Media Sanitization Level Schemes, such as:
- ...
- Counter-Examples:
- Data Classification Level, which categorizes information rather than removal effectiveness.
- Security Clearance Level, which authorizes access rather than sanitization degree.
- Backup Retention Level, which preserves rather than eliminates data.
- See: Security Assurance Level, Data Protection Standard, Media Sanitization Process, NIST SP 800-88 Guideline, Risk Management Framework, Threat Assessment Model, Compliance Requirement, Security Control Framework, Information Security Level, Data Lifecycle Stage.