Skip to content
Media
ASD ISMISM-0361

ASD ISM 0361 Using degaussers for magnetic media destruction

What it says

Magnetic media is destroyed using a degausser with a suitable magnetic field strength and magnetic orientation.

Quoted as published. Everything else on this page is written by Control Stack.

What it means

In plain English

Magnetic media is destroyed by ensuring the degausser has the right strength and orientation of the magnetic field.

This control is about using a degausser, a device that erases data from magnetic media, like old hard drives and tapes. It's crucial because if you don't properly destroy the data, sensitive information could fall into the wrong hands, risking privacy breaches and confidential data leaks.

Why it matters

If degaussing is ineffective or the wrong field strength/orientation is used, data on magnetic media may be recoverable, causing confidential data leaks and privacy breaches.

How to implement

  1. Ensure the IT team purchases or accesses a degausser that is suitable for the types of magnetic media used by the organisation.

    They should verify the machine's compatibility and strength ratings to ensure effective data destruction.

  2. The IT manager should train key staff members on how to operate the degausser safely and effectively.

    This training should cover setting the correct magnetic field strength and the process for confirming media has been properly degaussed.

  3. The person responsible for data security should establish a checklist for degaussing processes.

    This list should include steps such as identifying the media type, verifying the degausser settings, and confirming data is wiped post-processing.

  4. Regularly schedule a maintenance routine for the degausser, which could be done by the IT maintenance team.

    They should follow the manufacturer's guidelines to keep the equipment in good working order and reduce the risk of failed data destruction.

  5. The data protection officer should set up a log system where all degaussing activities are recorded.

    This log should include details like the date of degaussing, the media type, the responsible person, and any issues encountered during the process.

Keep it running

Confirm the degausser is calibrated and rated for the media type; verify required field strength and correct magnetic orientation, and maintain logs of testing and use.

Evidence and audit

  1. Check 1 of 5What an auditor asks for

    Ask for

    The degausser operation manual: Verify that the manual provides clear instructions on how to adjust magnetic field strength for different media types.

    Good evidence

    Includes detailed steps and guidelines from the manufacturer.

  2. Check 2 of 5What an auditor asks for

    Look at

    The entries to see if they consistently include dates, media types, and operator names.

    Good evidence

    Shows thorough record-keeping with no missing information.

  3. Check 3 of 5What an auditor asks for

    Good evidence

    Is up-to-date training records with signatures or completion certificates.

  4. Check 4 of 5What an auditor asks for

    Good evidence

    Involves precise adherence to the established checklist.

  5. Check 5 of 5What an auditor asks for

    Ask for

    How they ensure the degausser is maintained and what steps they follow.

    Good evidence

    Includes regular maintenance schedules and logs, showing compliance with manufacturer guidelines.

Mappings

Closest match in ISO/IEC 27001: A.7.10, Secure management of storage media, which this control partially meets.

ISO 27001

ISO/IEC 27001: 3 mappings

  • A.7.10Secure management of storage mediaPartially meets
  • A.7.14Secure disposal or re-use of equipmentPartially meets
  • A.8.10Secure deletion of information when no longer neededPartially meets

Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.