Who Sets the Standards for the Data Security Industry?
The MLB calls the shots for professional baseball, and the FDA sets the standards for America’s food and drugs. Similarly, data security has organizations that determine the trajectory of degaussing and destroying. When it comes data protection, the Department of Defense (DoD), National Security Agency (NSA), and National Institute of Standards and Technology (NIST) are the leaders on this topic.
The DoD
Aside from being the US’s largest government agency in charge of all military forces, the DoD assigns information security to different defense agencies. The DoD has assigned the NSA to research and write the official policy for information sanitization. Other DoD agencies also write their own information assurance policies, but they generally refer back to the NSA because they are the subject matter experts (SME).
The NSA
The NSA’s Center for Storage Device Sanitization Research (CSDSR) provides the guidance on how to properly destroy data. They also evaluate degaussers and destruction devices for complete data destruction. They publish the products that pass their testing in Evaluated Products Lists.
NIST
As part of the US Department of Commerce, NIST sets the standards for the smallest to largest technologies. Part of NIST’s job is to help organizations with their own media sanitization program. They also refer to the NSA and the NSA guidance because they are the SME.
Why is this important?
So, why does this matter? Here are three main reasons.
- These agencies know the data security industry better than anyone. They aren’t manufacturing products themselves, so they’re not looking to profit from their guidelines. Since the government gave them the authority to set the standard for information security, they’re trustworthy.
- This also means that every product in the industry can be measured up to the exact same standards. Degaussers and destroyers can be compared across the board between different models and brands. The agencies can officially approve specific products based on their performance.
- As the buyer, you have the freedom to evaluate different brands and products and determine what’s best for your needs. The NSA’s Evaluated Products Lists are a great place to start. You have the information at your fingertips to cross-examine and make an educated decision before you invest in a product.
If you’re in the market for a degausser or destroyer, go for NSA evaluated equipment. Explore Data Security, Inc.®’s offerings by giving us a call at 1(800) 225-7554 to connect with one of our experts!
Originally published October 29, 2024