Re: Physical HDD destruction

[Christopher Hickernell <chickernell () CLARION EDU>]

Our Helpdesk has a SEM 0101 Sledgehammer Hard Drive Crusher for destruction.  It only does one drive at a time, but it 
is convenient and easy to use.  When the technician pulls-out a drive, he can turn around and destroy it-no risks 
surrounding boxes/stacks of hard drive laying around with sensitive data on them waiting to be destroyed -- or stolen.  
This is not a good solution for bulk processing of hundreds of hard drives, but good for continuous use and small 
batches, then there is never a need to outsource the destruction.

Christopher Hickernell, CCNA, MCSE
Network Support Specialist, ResNet Manager
Clarion University of Pennsylvania
Center for Computing Services
G-13 Still Hall, Clarion, PA 16214
chickernell () clarion edu<mailto:chickernell () clarion edu> | 814.393.2218

"To be a long-term success, you have to have failures.  People who are working near their limit make mistakes and take 
risk."
~Gerry McCartney, Purdue University


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Matt 
Marmet
Sent: Tuesday, March 20, 2012 2:17 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Physical HDD destruction

Good day Everyone,

Here at Armstrong, we have a couple hundred hard drives that we have to physically disable/destroy. We also have about 
200 hard drives per year that our desktop support staff recover from old machines that need to be destroyed as well. We 
have seen some of the hydraulic electric presses that are enclosed as well as manual presses that are made for this 
type of work. What are other institutions using to destroy HDDs securely and safely?

Regards,

Matt

---
Matt Marmet
Director of IT Security, CISO
Armstrong Atlantic State University
11935 Abercorn Street
Savannah, GA 31419
Desk: (912) 344-3528<tel:%28912%29%20344-3528>
Cell:  (912) 414-0684<tel:%28912%29%20414-0684>

Security Tip: No matter how authentic the request appears, if you are asked in an email or via the phone to provide 
your password - it is a SCAM.

******* The ITS Team will NEVER, EVER, EVER ----- EVER ask for your
username and password via Email. Don't respond to any requests for
this information ******

"The lesson here is that anything that holds any data of any value must be protected."