THE WORKBENCH · NIST 800-88

The Method Picker

Two questions in, a defensible answer out: which sanitization methods are valid for this media, which destroy it, and which to never rely on.

1. What's the media?
2. What happens to the asset?

How to read the answer

NIST SP 800-88 Rev. 1 organizes sanitization into clear, purge, and destroy — and the right choice depends on both the media type and where the asset goes next. Media leaving your control (resale, donation, lease return, repair) warrants purge-level sanitization at minimum, with verification and a record; media at end of life is usually simplest and cheapest to destroy. Whatever the method, every sanitization event should be verified and recorded with the device's make, model, serial, method, tool, operator, and date — that record is what turns a wiped drive into audit evidence.

This picker covers the decision; the field guide's 800-88 section covers the why, and the Vault's SOP template turns the answers into your written procedure.

CYBERCRUNCH · NAID AAA · R2v3 · RIOS · PA DEP

Know the method. Want it done — and documented?

CyberCrunch performs verified sanitization and destruction across every media type above, with serialized certificates for each device.