D.O.D. Data Sanitization Matrix

Standard DoD 5220.22-M, US DoD 5220.22-M (ECE)

US Department of Defense in the clearing and sanitizing standard DoD 5220.22-M recommends the approach “Overwrite all addressable locations with a character, its complement, then a random character and verify” (see table with comments) for clearing and sanitizing information on a writable media.

US Department of Defense 5220.22-M Clearing and Sanitization Matrix

MediaClearSanitize
Magnetic Tape1
Type Ia or ba, b, or m
Type IIa or bb or m
Type IIIa or bm
Magnetic Disk
Bernoullisa, b, or cm
Floppiesa, b, or cm
Non-Removable Rigid Diskca, b, d , or m
Removable Rigid Diska, b, or ca, b, d , or m
Optical Disk
Read Many, Write Manycm
Read Onlym, n
Write Once, Read Many (Worm)m, n
Memory
Dynamic Random Access memory (DRAM)c or gc, g, or m
Electronically Alterable PROM (EAPROM)ij or m
Electronically Erasable PROM (EEPROM)ih or m
Erasable Programmable (ROM (EPROM)kl, then c, or m
Flash EPROM (FEPROM)ic then i, or m
Programmable ROM (PROM)cm
Magnetic Bubble Memoryca, b, c, or m
Magnetic Core Memoryca, b, e, or m
Magnetic Plated Wirecc and f, or m
Magnetic Resistive Memorycm
Nonvolatile RAM (NOVRAM)c or gc, g, or m
Read Only Memory ROMm
Static Random Access Memory (SRAM)c or gc and f, g, or m
Equipment
Cathode Ray Tube (CRT)gq
Printers
Impactgp then g
Lasergo then g

US Department of Defense 5220.22-M Clearing and Sanitization Matrix

a. Degauss with a Type I degausser

b. Degauss with a Type II degausser.

c. Overwrite all addressable locations with a single character.

d. Overwrite all addressable locations with a character, its complement, then a random character and verify. THIS METHOD IS NOT APPROVED FOR SANITIZING MEDIA THAT CONTAINS TOP SECRET INFORMATION.

e. Overwrite all addressable locations with a character, its complement, then a random character.

f. Each overwrite must reside in memory for a period longer than the classified data resided.

g. Remove all power to include battery power.

h. Overwrite all locations with a random pattern, all locations with binary zeros, all locations with binary ones.

i. Perform a full chip erase as per manufacturer’s data sheets.

j. Perform i above, then c above, a total of three times.

k. Perform an ultraviolet erase according to manufacturer’s recommendation.

l. Perform k above, but increase time by a factor of three.

m. Destroy – Disintegrate, incinerate, pulverize, shred, or melt.

n. Destruction required only if classified information is contained.

o. Run five pages of unclassified text (font test acceptable).

p. Ribbons must be destroyed. Platens must be cleaned.

q. Inspect and/or test screen surface for evidence of burned-in information. If present, the cathode ray tube must be destroyed.