Paper Title: Critical Considerations when Sanitizing Flash Media

Paper Abstract: A recent study found that governments and public organizations spend $17 million USD destroying SSDs and another $40 million USD to replace them. With current supply issues and green initiatives, the redeployment of media would be a significant cost and resource savings as long as the drives are sanitized properly. Sanitization has become a major part of the data storage lifecycle process. But how can one be sure that evolving NIST standards are met? Is sanitization enough to protect against GDPR, HIPAA, PII, or PCI breaches and what happens when there is a failure to comply? This presentation will discuss the different methods of sanitization, potential hardware problems, and how to implement and verify a sanitization process.

Paper Author: David Logue, Operations Manager | Lead Data Recovery Engineer, Ontrack

Author Bio: David Logue is the Operations Manager and Lead Data Recovery Engineer at Ontrack Data Recovery. Dave assists customers around the world with the recovery of data from failed or damaged computer systems while ensuring efficiency and quality at every stage of the data recovery process. Dave joined Ontrack in 2001 and he has over 20 years of data recovery experience. Leveraging Dave’s expertise, he currently leads teams whose members specialize in the remote recovery of high end SAN and NAS storage technologies as well as provide technical support to customers. He also works closely with Ontrack development teams to communicate client needs, build innovative tools, and create and deliver custom solutions for specific data loss needs. He is further involved with the system administration & storage teams in managing the IT infrastructure for the data recovery business. Prior to joining Ontrack, he held server and database administration positions with a leading health care company as well as management roles within their technical support teams. Dave received two B.A. degrees from Hamline University in Business Administration and Psychology. He also earned a J.D. from Hamline University School of Law and is currently licensed to practice in the state of Minnesota. Specialties: Data Recovery, Sanitization, MS SQL, Oracle, Exchange, VMware, Product Management, Ransomware