Skip to content
Media
ASD ISMISM-0362

ASD ISM 0362 Follow manufacturer's directions for degaussing

What it says

Product-specific directions provided by degausser manufacturers are followed.

Quoted as published. Everything else on this page is written by Control Stack.

What it means

In plain English

Ensure magnetic media is degaussed according to the manufacturer's instructions to properly erase data.

This control is all about ensuring that when you erase data from magnetic storage, like tapes, you do it correctly by following the machine maker's guidelines. If you skip this, old data might not be fully erased and could fall into the wrong hands, leading to privacy breaches or data theft, especially in sensitive industries.

Why it matters

Not following manufacturer degaussing directions (cycle, field strength, media compatibility) can leave data recoverable, causing breaches and penalties.

How to implement

  1. The IT team should verify that all degaussers in use are the right type for the media being erased.

    Check the manufacturer's specifications for compatibility before proceeding to degauss any tapes or drives.

  2. The designated staff member, usually in IT or asset management, should follow the manufacturer's step-by-step instructions when operating the degaussing equipment.

    This might include settings for strength and duration specific to each type of media.

  3. Managers should provide training to staff responsible for data destruction, ensuring they understand both the equipment and the importance of following the guidelines closely.

    Organising regular training refresher sessions can maintain standards.

  4. A procurement officer should keep a record of manufacturer manuals and updated instruction documents for each degaussing device.

    They should store these digitally in an easily accessible location for the team to reference.

  5. The IT department should schedule routine checks and maintenance of the degaussers to ensure they are operating according to manufacturer specifications.

    This includes checking performance and calibrations, as recommended in the manual.

Keep it running

Verify correct degauss cycle and media type per the degausser manufacturer; keep firmware/manuals current and record settings used for each job.

Evidence and audit

  1. Check 1 of 5What an auditor asks for

    Ask for

    The current manufacturer's manual for each degausser: Confirm that staff are using the correct and up-to-date instructions.

    Look at

    Documents specific to your device model.

    Good evidence

    Includes the latest manual version and storage in an accessible location.

  2. Check 2 of 5What an auditor asks for

    Good evidence

    Includes attendee lists, presentation materials, and training dates.

  3. Check 3 of 5What an auditor asks for

    Good evidence

    Is the person completing each step as per the guidelines without deviation.

  4. Check 4 of 5What an auditor asks for

    Ask for

    The maintenance logs of the degausser equipment.

    Look at

    The details of routine checks and any adjustments made according to the manufacturer's standards.

    Good evidence

    Shows logs of regular tests, actions taken, dates, and responsible persons.

  5. Check 5 of 5What an auditor asks for

    Ask for

    About their understanding of the guidelines and how frequently they refer to them.

    Good evidence

    Includes staff being aware of where to find the instructions and how they follow them.

Mappings

Closest match in ISO/IEC 27001: A.7.10, Secure management of storage media, which this control partially meets.

ISO 27001

ISO/IEC 27001: 3 mappings

  • A.7.10Secure management of storage mediaPartially meets
  • A.7.14Secure disposal or re-use of equipmentPartially meets
  • A.8.10Secure deletion of information when no longer neededDepends on

Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.