Re: Recover data from As/400 Drives

according to this, you'll also need a hammer......

http://www-912.ibm.com/s_dir/slkbase.nsf/1ac66549a21402188625680b0002037e/50137ca2b4a65be086256e2900743197?OpenDocument&Highlight=0,dod
Document Title
Does the IBM® iSeries™ Initialize Its Disk Units to the DoD 5220.22-M
Standard?

Document Description
With many users required to follow HIPAA (or Protected Health Information /
PHI) guidelines, it has been asked if the data on the iSeries (AS400) disk
units is safe if they are removed from the ASP and initialized. When you
select the option to Remove Units from Configuration within Dedicated
Service Tools,
the system clears the first two pages on the disk unit(s). This means only
the first 8 kb is cleared. If you select Delete disk unit data, whether in
Service Tools or Dedicated Service Tools, this will perform one complete
pass (zeroing out all the pages on the disk) on a non-configured disk unit.
Currently there are no SLIC tools to clear a disk unit to the Department of
Defense's 5220.22-M standard. Also, no 3rd party application can have
access to a non-configured disk unit, so there is currently nothing
available for the iSeries.

The only option for a customer to guarantee no data recovery on a disk unit
is to physically destroy that disk unit.

National Industrial Security Program Operating Manual (January 1995)
http://www.dss.mil/isec/nispom_0195.pdf

National Industrial Security Program Operating Manual (Change One, July
1997; Change Two, February 2001)
http://www.dss.mil/isec/nispom.pdf


this one points back to the first.....

http://www-912.ibm.com/s_dir/slkbase.nsf/1ac66549a21402188625680b0002037e/5f48b9883b62d0d386256807007b5b90?OpenDocument&Highlight=0,dod



_____________________________
Bryan Dietz
Aktion Associates

"i want an i"




midrange-l-bounces@xxxxxxxxxxxx wrote on 08/16/2006 11:26:54 AM:

->    If I have done BOTH of:
->     a) Delete ASP Data
->       - AND -
->     b) booted to a SLIC CD and done Initialize and Format disks forall
disks
->    on a system.
->
->    is there any possibilty, however remote, that data could be recovered
from
->    those disks?
->
->    In other words if you had disks from your company that had been
cleared in
->    this manner would you be comfortable selling those disks on the used
->    market?  I have a customer who believes that SOX says you cannotsell
that
->    stuff because data could be recovered. I think they have 100,000
times
->    more exposure by having IT staff take backup tapes home in their car
as
->    off-site backups!
->
->     - Larry