Topic

Sanitising IT equipment

Applicable to

all

History

Priority

must

Jun 2024

IT equipment containing media is sanitised by removing the media from the IT equipment or by sanitising the media in situ.

References to ICT equipment were amended to IT equipment.

Mar 2022

ICT equipment containing media is sanitised by removing the media from the ICT equipment or by sanitising the media in situ.

Miscellaneous changes were made to rationale and recommendations throughout the publication to clarify content without changing intent. This included a review from the Guidelines for System Hardening chapter through to the Guidelines for Data Transfers chapter.

2015

When disposing of ICT equipment containing sensitive or classified media, agencies mustsanitise the equipment by either:• sanitising the media within the equipment• removing the media from the equipment, then sanitising or destroying the mediaindividually and disposing of it separately• destroying the equipment in its entirety.

2010

Agencies must sanitise or destroy, then declassify, ICT equipment containing classified mediabefore disposal.

2008

Agencies must sanitise or destroy and de-classify hardware products containing classified media to an UNCLASSIFIED level before disposal.