Re:Scaleway: Incident SSD was stolen during a secure transpo...
by orwin on Monday July 26, 2021 @08:15AM
(#27958473)
Yeah, our procedure for decommissioned SSD and HDD (imposed to us by HDS requirement) where 3-pass shred on the disk (logical wiping), and either pierce the HDD or microwave the SSD, with photographic proof send to our client if asked.
The 3-pass shred was done on the virtual disk each time a client left, and was done on the physical during maintenance.
[edit] And concerning encryption, it was at a premium, and i think only one of our client asked for it (this had a few issue). "hot" logs where not encrypted, but during the logrotation we tried to implement this (this was not technically audited btw, i think it was OK for Deloitte not to see our code)
The 3-pass shred was done on the virtual disk each time a client left, and was done on the physical during maintenance.
[edit] And concerning encryption, it was at a premium, and i think only one of our client asked for it (this had a few issue). "hot" logs where not encrypted, but during the logrotation we tried to implement this (this was not technically audited btw, i think it was OK for Deloitte not to see our code)