RE: need to wipe a NAS and be DoD compliant

["Lujan Sgt Pedro D" <pedro.lujan () usmc mil>]

 SuttonP
> From the looks of your e-mail "aafes" the question would need to be
asked if you are located on a military base. If so the local command
would "direct" the use of specific tools that meet their own
requirements. Also at what level of classification are you trying to
wipe? (Unclass, Secret, TS.) There are very limited tools to use, that
meet the DoD requirements, but proper use and prior approval of its use
should be checked on first.

One tool used when "authorized" is BCWipe. It meets the requirements of
DoD 5200.28-STD. 

However, I strongly recommend checking with your local command and its
policies before attempting to wipe any system. 
Normally if we need something wiped that meets DoD standards, it's
because we are trying to remove some data of a higher classification
level than the device is authorized to store. If this is the case than
you should definitely seek out your IAM / IAO or data section to avoid
getting thrown in jail or losing your job.



-----Original Message-----
From: suttonp () aafes com [mailto:suttonp () aafes com] 
Sent: Friday, June 23, 2006 5:15
To: security-basics () securityfocus com
Subject: need to wipe a NAS and be DoD compliant

Need assistance locating a DoD compliant solution for wiping info from a
NAS device. Any suggestions?

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has
designated Norwich University a center of Academic Excellence in
Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------