"Happy Birthday! May All Your Dreams Come True"
... must be a reference to yesterday's birth of the ISC2 ... or are we just going by "2" now?
@ericgeater I don't have a specific recommendation. For awhile, it was a 4-lbs sledge hammer (safety glasses are an essential). My guess is any advertised product will re-format and zero out the media. If you're really paranoid, do it multiple times. If I have access to the media, I'm still physically destroying it. When you look at the declining cost of storage, you're probably not re-using it anyway.
The larger issue, however, may be where is the data. In this day and age, it can be in many places and cached on many devices. This gets to SOC reports and SLAs. But there are some policy and training issues at work here. One thing I try to impress on people is write locally and then move your document to your cloud environment. The premise that we classify first and then create may make sense from a security standpoint but very few people actually work that way. We create, then we classify. It can takes months in some cases for someone to identify or recognize that a sensitive nugget of information entered a document.
