Re: DOD wipe of disks in a virtual environment.

[DrFranken <midrange@xxxxxxxxxxxx>]

The backup tapes are off site, so that data is already gone. :-) :-)

In the case that started this whole mess the customer specified this in 
their RFQ. Sadly the group that took the order is in CT and we're over 
here in MI getting these requirements waaaaay after the fact.  First was 
the data on disk had to be encrypted. We pulled that off with a small 
ASP that we encrypted. Easy and relatively painless. Now we're finding 
out about the disk erasure as well.  Nobody has asked about encrypted 
backup tapes and we aren't bringing that up. :-) :-)

In the end it's our contention that the 'salesman' needs to eat all this 
cost because they promised it to the customer without getting costs to 
provide it from I.T.

        - Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 8/27/2015 5:01 PM, Steve Pavlichek wrote:
> Since the End-user data is just stored in a separate library and IFS folder and there are multiple other End-user data on the system, there is no way to “Wipe” their data off the disk. The only way to ensure the data was gone would be to copy all of the other data to new disk (NWSSTG) and then sanitize and delete the old NWSSTG.
>
> My suggestion would be to find out:
> 1.  Was this a documented requirement in the End-user contract?
> 2.  Is this a customer requirement, auditor requirement or legal requirement (PCI, HIPPA, etc..)
>
> Depending on answer to #2, ask for a copy of the exact requirements (What standard is it based on) as there may be flexibility in what is being requested.
>
> If the End-user is that specific about the deletion of the data, what about backup tapes your customer has?