hesela.devSanitization validation
Sanitization validation decides whether to accept or reject a sanitization result after evaluating its evidence, suitability and remaining risk to data confidentiality.
NIST SP 800-88 Rev. 2 section 4.5.2 considers verification results together with anomalies, inaccessible media areas and whether the chosen technique suits the medium and information sensitivity. A successful tool report is not sufficient when the technique is inappropriate. Rejection calls for another suitable technique or a stronger method, with media reusability checked again; it is not permission to repeat the same failed procedure indefinitely. [1]
Relations
- related
- data-sanitization, sanitization-verification, clear-sanitization, purge-sanitization, destroy-sanitization, cryptographic-erase
Advantages
- Makes release depend on the adequacy of the result, rather than merely completion of a workflow. [1]
Limitations
- An acceptance record cannot turn an unsuitable technique or unresolved confidentiality risk into effective sanitization. [1]