NSA 9-12 20260219.pdf

NSA/CSS POLICY MANUAL 9-12

STORAGE DEVICE

SANITIZATION MANUAL

PUBLICATION INFORMATION

DATE: 19 February 2026 (See Document History.)

OFFICE OF PRIMARY

INTEREST:

Center for Storage Device Sanitization Research (301) 688-1053

RELEASABILITY: NSA/CSS Policy Manual 9-12 is approved for public release. The official document is available on the Corporate Policy (P12) website

(“go policy”).

AUTHORITY: Greg Smithberger, Acting Director, Cybersecurity

ISSUED: 19 February 2026

PURPOSE AND SCOPE

1. This policy manual provides guidance on routine sanitization of information system

(IS) storage devices for disposal or recycling in accordance with DoD Manual 5200.01, volume

3, “DoD Information Security Program: Protection of Classified Information”; Intelligence

Community Standard 500-34, “Electronic Waste Management and Disposal”; Committee on

National Security Systems Instruction (CNSSI) No. 4004.1, “Destruction and Emergency

Protection Procedures for COMSEC and Classified Material”; and NSA/CSS Policy Statement 9-

12, “Storage Device Sanitization.” Information stored on these devices may range from unclassified to top secret and include compartmented, sensitive, or limited-distribution material.

This manual also provides information on how to obtain current listings of evaluated sanitization equipment meeting NSA/CSS specifications. This manual does not cover the emergency sanitization procedures as written in CNSSI No. 4004.1.

2. This manual applies to NSA/CSS elements, contractors, and personnel and pertains to all IS storage devices that they use.

Policy Manual 9-12 19 February 2026

TABLE OF CONTENTS

PUBLICATION INFORMATION

PURPOSE AND SCOPE

TABLE OF CONTENTS

LIST OF TABLES

PROCEDURES

Hard-Copy Information System (IS) Storage Devices

Paper

Paper Sanitization

Punched Tape

Punched Tape Sanitization

Toner-Based Printers

Toner-Based Printer Sanitization

Cathode Ray Tube (CRT) and Plasma Monitors

Cathode Ray Tube (CRT) and Plasma Monitor Sanitization

Magnetic Information System (IS) Storage Devices

Magnetic Tapes

Magnetic Tape Sanitization

Magneto-Resistive Random-Access Memory (MRAM)

Hard Disk Drives (HDDs)

Hybrid Drives

Hybrid Drive Sanitization

Optical Information System (IS) Storage Devices

Solid-State Information System (IS) Storage Devices

RESPONSIBILITIES

Center for Storage Device Sanitization Research (CSDSR)

NSA/CSS Elements, Contractors, and Personnel

REFERENCES

GLOSSARY

DOCUMENT HISTORY

ANNEX: REFERENCE SHEET

LIST OF TABLES

Paper Sanitization ............................................................................ Error! Bookmark not defined. Punched Tape

Sanitization........................................................................................................... 6 Toner Based

Printer Sanitization ................................................................................................ 6 Cathode

Ray Tube & Plasma Monitor Sanitization

Magnetic Tape Sanitization

Hybrid Drive Sanitization

10 Magnetic Hard Drive Sanitization

............................................................................................ 11 Heat Assisted Magnetic

Recording Hard Drive Sanitization

CD Sanitization

DVD, Blu-ray Sanitization

Solid-State IS Device Sanitization

PROCEDURES

3. For guidance on sanitizing and releasing IS storage devices that this document does not cover, submit pertinent information to the NSA/CSS Center for Storage Device

Sanitization Research CSDSR (CSDSR_NSA@nsa.gov).

4. NSA/CSS’s internal overall process for routine sanitization of IS storage devices will consist of the following:

a. Sanitization: Sanitizing IS storage devices using the approved procedures in the device-specific sections in this policy manual;

b. Administrative Declassification: Administratively declassifying the remains of sanitized IS storage devices after completing approved verification and review procedures in accordance with NSA/CSS Policy 6-22, “Handling of NSA/CSS

Information Storage Media”; and

c. Release: Unless the appropriate IS security officer (or equivalent) specifies otherwise, users may release for disposal or recycling administratively declassified IS storage devices only after completing sanitization procedures and an administrative declassification review in accordance with NSA/CSS Policy 6-22.

5. Heritage Asset Review—NSA/CSS entities should contact the National

Cryptologic Museum to determine whether an IS storage device has historical value in accordance with the Deletion of Heritage Assets Standard Operating Procedure.

6. Individuals outside of NSA/CSS should contact their local security office for appropriate administrative declassification procedures.

7. The sanitization of these materials must be done in bulk when feasible. Debris remaining after the sanitization process should be mixed.

8. Government contractors should follow guidance/policy of their cognizant government industrial security oversight organization.

Hard-Copy Information System (IS) Storage Devices

9. Hard-copy IS storage devices include paper, punched tape, toner cartridges, and cathode ray tube (CRT) and plasma monitors exhibiting burn-in.

Paper

10. Sanitize paper by using one of the following procedures (summarized in

Paper Sanitization):

a. Shred using a paper shredder included on the most recent NSA/CSS

Evaluated Products List (EPL) for Paper Shredders. Paper must be shredded in bulk with other paper when feasible.

b. Disintegrate using a paper disintegrator included on the most recent

NSA/CSS EPL for Paper Disintegrators. Chop, pulverize, or wet pulp material to reduce it to residue pieces that are 5 millimeters (mm) or smaller on edge. Paper must be sanitized in bulk with other paper when feasible.

c. Incinerate to ash at a temperature greater than 233ºC.

11. The NSA/CSS EPLs specify additional methods.

12. Proceed to Administrative Declassification.

Paper Sanitization

Sanitize Administratively Declassify Destroy

Use one of the following methods:

a. Shred.

b. Disintegrate.

c. Chop, pulverize, wet pulp.

d. Incinerate.

Or use other method(s) specified in the NSA/CSS EPLs.

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

Punched Tape

13. Sanitize punched tape by using one of the following procedures

(summarized in Punched Tape Sanitization):

a. Disintegrate using a punched tape disintegrator included on the most recent NSA/CSS EPL for Punched Tape Disintegrators.

b. Incinerate to ash at a temperature greater than 233ºC.

14. The NSA/CSS EPL specifies additional methods.

15. Proceed to Administrative Declassification.

Punched Tape Sanitization

Sanitize Administratively Declassify Destroy

Use one of the following methods:

a. Disintegrate.

b. Incinerate.

Or use other method(s) specified in the NSA/CSS EPL.

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

Toner-Based Printers

16. Sanitize toner-based printers using one of the following procedures (summarized in Toner Based Printer Sanitization):

a. Disassemble and clean:

1) Remove any non-volatile memory storage devices. Follow sanitization procedures for solid-state memory in accordance with solid-state IS storage devices (beginning with Solid-State Information System (IS) Storage

Devices).

2) Find and wipe the surface of the OPC (organic photo conductor) drum with a cloth or rag. (This may require opening the toner cartridge to find the drum.)

3) Remove and incinerate the fuser unit.

b. Incinerate:

1) Remove any non-volatile memory storage devices. Follow sanitization procedures for solid-state memory in accordance with solid-state IS storage devices (beginning with Solid-State Information System (IS) Storage

Devices).

2) Incinerate drum and fuser unit at a temperature greater than

670 C.

17. Proceed to Administrative Declassification.

Toner-Based Printer Sanitization

Sanitize Administratively Declassify Destroy

Use one of the following methods:

a. Disassemble and clean.

b. Follow solid-state IS storage device procedures to sanitize solid-state memory (Solid-

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

State Information System (IS) Storage Devices).

c. Clean the drum.

d. Incinerate the fuser unit.

e. Incinerate.

Cathode Ray Tube (CRT) and Plasma Monitors

18. After removing labels or markings that indicate previous use or classification, sanitize CRT and plasma monitors exhibiting burn-in by using one of the following procedures (summarized in Cathode Ray Tube (CRT) and Plasma Monitor Sanitization):

a. Disintegrate the display of the monitor into pieces no larger than 50 mm on edge.

b. Clean—sanitize CRTs by cleaning the inside of the tube, removing any burn-in. Inspect after cleaning to ensure adequate cleaning.

19. Proceed to Administrative Declassification.

Cathode Ray Tube (CRT) and Plasma Monitor Sanitization

Sanitize Administratively Declassify Destroy

Remove labels or markings, then use one of the following methods:

b. Clean.

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

Magnetic Information System (IS) Storage Devices

20. Magnetic IS storage devices include tapes, magneto-resistive random-access memory

(MRAM), and hard disk drives (HDDs). See Magneto-Resistive Random-Access Memory

(MRAM) and Hard Disk Drives (HDDs).

Magnetic Tapes

21. After removing labels or markings that indicate previous use or classification, sanitize magnetic tapes using one of the following procedures (summarized in Magnetic Tape Sanitization):

a. Degauss using a magnetic degausser included on the most recent

NSA/CSS EPL for Magnetic Degaussers.

b. Disintegrate into particles that are nominally 2 mm in size, preferably in bulk lots with other storage devices.

c. Incinerate at a temperature greater than 650ºC.

22. The NSA/CSS EPL specifies additional methods.

23. Proceed to Administrative Declassification.

Magnetic Tape Sanitization

Sanitize Administratively Declassify Destroy

Remove labels or markings, then use

a. Degauss.

c. Incinerate.

Or use other method(s) specified in the

NSA/CSS EPL.

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

Magneto-Resistive Random-Access Memory (MRAM)

24. MRAM devices operate similarly to traditional RAM, but an MRAM device is a nonvolatile memory storage medium; power removal will not erase information contained within

MRAM. Treat MRAM as a solid-state device, and see Solid-State Information System (IS)

Storage Devices for sanitization instructions.

Hard Disk Drives (HDDs)

25. HDDs continue to evolve and can incorporate more than one type of storage media in the same device (hybrid drives); there is no longer a one-size-fits-all approach to HDD sanitization, and some methods that were acceptable in the past are no longer sufficient. Check the latest versions of the NSA/CSS EPLs for details. The NSA/CSS EPL for Magnetic

Degaussers and NSA/CSS EPL for Solid State Disintegrators document the limitations of these devices with respect to the media for which they are rated. If you have questions, please contact the CSDSR for clarification.

26. HDDs include hybrid drives, magnetic HDDs, and heat-assisted magnetic-recording HDDs (HAMRs). Pay particular attention to ensure that hard drives are correctly processed for disposition, scrutinizing them carefully, as these drives are available in multiple forms. Some HDDs and solid-state storage devices (SSDs) may appear to be identical at first glance. Refer to the manufacturer and model numbers for HDDs and SSDs to correctly identify the appropriate device.

a. Laptop HDDs manufactured after 2005 and Enterprise HDDs manufactured after 2012 are potentially hybrid HDDs, which require additional sanitization procedures beyond standard magnetic HDDs.

b. Hard drives manufactured after 2020 may be HAMRs. At this time, incineration is the only approved sanitization method for HAMRs.

1) HAMRs sold domestically are required to contain one of the following statements on the exterior product label:

a) “Complies with FDA performance standards for laser products except for conformance with IEC1 60825-1 Ed. 3., as described in Laser

Notice No. 56, dated February 21 2023” (See the NSA/CSS EPL for Hard

Disk Drive Sanitization Devices and Deformers.)

b) “Complies with 21 CFR 1040.10 and 1040.11 except for conformance with IEC 60825-1 Ed. 3., as described in Laser Notice No.

56, dated February 21 2023 (See the NSA/CSS EPL for Hard Disk Drive

Sanitization Devices and Deformers.)

2) HAMR products sold within the European Union are required to state “Class 1 consumer laser product EN 50689:2021” in one or more languages.

Hybrid Drives

27. After removing labels or markings that indicate previous use or classification, sanitize hybrid drives by using one of the following procedures

(summarized in Hybrid Drive Sanitization):

a. Disintegrate using a sanitization device approved for HDDs included on the most recent NSA/CSS EPL for Hard Disk Drive Sanitization Devices and Deformers.

b. Disassemble and degauss—separate the HDD case and the external circuit board. Follow sanitization procedures for the HDD case in accordance with magnetic

HDD instructions (beginning with Magnetic Hard Disk Drives (HDDs)) and follow sanitization procedures for the HDD external circuit board in accordance with solid-state

IS storage devices (beginning with Solid-State Information System (IS) Storage Devices).

c. Incinerate at a temperature greater than 670ºC.

28. The NSA/CSS EPL specifies additional methods.

1 International Electrotechnical Commission

29. Proceed to Administrative Declassification.

Hybrid Drive Sanitization

Remove labels or markings, then use

b. Separate the circuit board from hard drive; then

1) Follow magnetic HDD procedures to sanitize the hard drive (Magnetic Hard Disk

Drives (HDDs)).

2) Follow solid-state IS storage device procedures to sanitize the circuit board (Solid-State Information System (IS) Storage Devices).

NSA/CSS EPL.

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

Magnetic Hard Disk Drives (HDDs)

30. After removing labels or markings that indicate previous use or classification, sanitize HDDs using one of the following procedures (summarized in

Magnetic Hard Disk Drive (HDD) Sanitization):

a. Degauss using a magnetic degausser included on the most recent

NSA/CSS EPL for Magnetic Degaussers.

1) Test permanent magnetic degaussers before each session. Due to temperature sensitivity and delicate nature of the permanent magnetic assemblies, reduction of performance can result from hard impact or exposure to temperatures exceeding 120°F (48.9°C), which will permanently reduce the magnetic strength.

If daily testing indicates substandard performance, contact the manufacturer for guidance. Do not attempt to service or disassemble a degausser.

2) Test electronic pulse degaussers before each session. Electronic pulse degaussers are susceptible to gradual degradation from repeated use. If daily testing indicates substandard performance, contact the manufacturer for guidance.

Do not attempt to service or disassemble a degausser.

b. Once it is degaussed, the HDD must be physically damaged by deforming the internal platters by any means before release or using a HDD sanitization device included on the most recent NSA/CSS EPL for Hard Disk Drive Sanitization Devices and

Deformers.

c. Disintegrate using a sanitization device approved for HDDs included on the most recent NSA/CSS EPL for Hard Disk Drive Sanitization Devices and Deformers

d. Incinerate at a temperature greater than 670ºC.

31. The NSA/CSS EPL specifies additional methods.

32. Proceed to Administrative Declassification.

Magnetic Hard Disk Drive (HDD) Sanitization

Sanitize Administratively Declassify Destroy

Remove labels or markings, then use one of the following methods:

a. Degauss, followed by platter deformation.

NSA/CSS EPL.

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

Heat-Assisted Magnetic-Recording Hard Disk Drives (HAMRs)

33. After removing labels or markings that indicate previous use or classification, sanitize HAMRs by incinerating them at a temperature greater than 670ºC

(summarized in Heat-Assisted Magnetic-Recording (HAMR) Hard Drive Sanitization).

34. The NSA/CSS EPLs specify additional methods.

35. Proceed to Administrative Declassification.

Heat-Assisted Magnetic-Recording (HAMR) Hard Drive Sanitization

Remove labels or markings, then incinerate, or use other method(s) specified in the NSA/CSS EPLs.

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

Optical Information System (IS) Storage Devices

36. Optical IS storage devices include compact discs (CDs), digital versatile discs

(DVDs), and Blu-ray discs (BDs).

37. After removing labels or markings that indicate previous use or classification, sanitize optical IS storage devices using the specific procedures noted in the following sections as applicable.

Compact Discs (CDs)

38. Sanitize CDs using one of the following procedures (summarized in

Compact Disc (CD) Sanitization):

a. Disintegrate using a product approved for CDs included on the most recent NSA/CSS EPL for Optical Sanitization Devices.

b. Emboss/knurl using an embosser/knurler included on the NSA/CSS EPL for Optical Sanitization Devices.

c. Grind using a grinder included on the NSA/CSS EPL for Optical

Sanitization Devices.

d. Incinerate to ash at a temperature greater than 600ºC.

39. The NSA/CSS EPL specifies additional methods.

40. Proceed to Administrative Declassification.

Compact Disc (CD) Sanitization

Sanitize Administratively Declassify Destroy

Remove labels or markings, then use one of the following methods:

a. Disintegrate.

b. Emboss/knurl.

c. Grind.

d. Incinerate.

Or use other method(s) specified in the

NSA/CSS EPL.

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

Digital Versatile Discs (DVDs) and Blu-ray Discs (BDs)

41. After removing labels or markings that indicate previous use or classification, sanitize DVDs and BDs using one of the following procedures

(summarized in Digital Versatile Disc (DVD) and Blu-ray Disc (BD) Sanitization):

a. Disintegrate using a product approved for DVDs or BDs included on the most recent NSA/CSS EPL for Optical Sanitization Devices.

b. Incinerate to ash at a temperature greater than 600ºC.

42. The NSA/CSS EPL specifies additional methods.

43. Proceed to Administrative Declassification.

Digital Versatile Disc (DVD) and Blu-ray Disc (BD) Sanitization

Sanitize Administratively Declassify Destroy

Remove labels or markings, then use one of the following methods:

a. Disintegrate.

b. Incinerate.

Or use other method(s) specified in the

NSA/CSS EPL.

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

Solid-State Information System (IS) Storage Devices

44. Solid-state IS storage devices are those that store data and have no moving parts.

Types of solid-state storage include RAM, ROM (read-only memory), field programmable gate array (FPGA), and flash memory SSDs come in a growing number of formats; USB

(universal serial bus) thumb drives, storage device (SD) cards, micro SD cards, SIM

(subscriber identity module) cards, compact flash, solid-state drives, CACs (common access cards), and NVMe (nonvolatile memory express) M2 drives, as well as other formats less commonly used in digital cameras and video game systems.

45. After removing labels or markings that indicate previous use or classification, sanitize solid-state IS storage devices using one of the following procedures (summarized in

Solid-State Information System (IS) Device Sanitization):

a. Disintegrate using a solid-state sanitization device approved for the device being sanitized included on the most recent NSA/CSS EPL for Solid State Sanitization

Devices.

b. Incinerate at a temperature greater than 500ºC.

c. Power removal—sanitize only DRAM (dynamic RAM), SRAM (static RAM), and volatile FPGA by removing the power, including backup batteries; sanitization occurs within 60 minutes after power removal.

1) Power removal is not sufficient for any other types of RAM (e.g., MRAM, NVRAM (non-volatile RAM), FeRAM (ferroelectric RAM), RRAM

(resistive RAM).

2) Sanitize other RAM variants in accordance with Solid-State

Information System (IS) Storage Devices.

46. The NSA/CSS EPL specifies additional methods.

47. Proceed to Administrative Declassification.

Solid-State Information System (IS) Device Sanitization

Sanitize Administratively Declassify Destroy

Remove labels or markings, then use one of the following methods:

a. Disintegrate.

b. Incinerate.

c. Power removal only for

DRAM, SRAM, and volatile FPGA

Or use other method(s) specified in the

NSA/CSS EPL.

See Administrative

Declassification.

Process residual product as unclassified for disposal or recycling.

RESPONSIBILITIES

Center for Storage Device Sanitization Research (CSDSR)

48. The CSDSR shall:

a. Establish and maintain guidance and procedures for sanitizing, administratively declassifying, and releasing classified or sensitive information on IS storage devices; and

b. Provide technical guidance for sanitizing and destroying IS storage devices.

NSA/CSS Elements, Contractors, and Personnel

49. NSA/CSS elements, contractors, and personnel using this manual shall follow the procedures in NSA/CSS Policy 6-22 for requesting, conducting, and documenting the sanitization and administrative declassification of IS storage devices.

REFERENCES

Please note: The latest versions (published quarterly) of all NSA/CSS EPLs are available at https://www.nsa.gov/resources/media-destruction-guidance/.

Property Management Deletion of Heritage Assets Standard Operating Procedure, dated

22 April 2025

CNSSI No. 4004.1, “Destruction and Emergency Protection Procedures for COMSEC and

Classified Material,” dated 9 January 2008

DoD Manual 5200.01, volume 3, “DoD Information Security Program: Protection of Classified

Information,” dated 24 February 2012, incorporating change 4, 17 January 2025

Intelligence Community Standard 500-34, “Electronic Waste Management and Disposal,” dated

8 November 2023

Laser Notice No. 56, “Laser Products—Conformance with IEC 60825-1 Ed. 3 and IEC 60601-

222 Ed. 3.1),” dated 21 February 2023

NSA/CSS EPL for Hard Disk Drive Sanitization Devices and Deformers

NSA/CSS EPL for Magnetic Degaussers

NSA/CSS EPL for Optical Sanitization Devices

NSA/CSS EPL for Paper Disintegrators

NSA/CSS EPL for Paper Shredders

NSA/CSS EPL for Punched Tape Disintegrators

NSA/CSS EPL for Solid State Sanitization Devices

NSA/CSS Policy 6-22, “Handling NSA/CSS Information Storage Media,” dated 15 August 2023

NSA/CSS Policy 6-36, “Digital Copiers,” dated 18 June 2020

GLOSSARY

administrative declassification—an administrative decision/action based on a consideration of risk by the owner, resulting in the classification of the remains of a properly sanitized storage device being downgraded to unclassified (Note: This term is unrelated to the term

“declassification” that appears in Executive Order 13526, “Classified National Security

Information.”) burn-in—The term “burn-in” means the tendency for an image that is shown on a display over a long period of time to become permanently fixed on the display. This is sometimes seen in such emissive displays as CRT (cathode ray tube) and plasma, because chemical changes can occur in the phosphors when exposed repeatedly to the same electrical signals.

deformation— physical damage by bending the internal platters of a hard disk drive rendering it unusable degausser—an instrument that generates a magnetic field of sufficient magnitude to change the polarity of all magnetic grains within the storage medium degaussing (or demagnetizing)—process that uses magnetic fields to change the polarity of magnetization in magnetic media grains so that all boundaries between adjacent recorded bits and information stored within the grains are eliminated incineration—sanitization of an information system storage device by burning information system (IS) storage devices—physical storage devices that an IS uses and on which data is recorded recycling—end state for information system storage devices processed in such a way as to make them ready for reuse, adapt them to a new use, or reclaim constituent materials of value sanitization—Sanitization is the removal of information from a storage device in order to prevent data recovery using any known technique or analysis. Sanitization includes removing data, labels, markings, and activity logs from a storage device. The method of sanitization varies depending upon the storage device in question and may include degaussing, incineration, shredding, disintegrating, grinding, or embossing. The end of the sanitization process renders a storage device inoperable.

volatile/non-volatile memory storage—

a. Memory is volatile when it loses its content after power is turned off or lost.

b. Memory is non-volatile when it retains its content after power is turned off or lost.

(Source: Adapted from National Institute Standards and Technology Special

Publication 800-72, “Guidelines on PDA Forensics,” November 2004)

DOCUMENT HISTORY

Date Approved by Description

19 February 2026 Greg Smithberger, Acting Director, Cybersecurity

Policy reissuance; supersedes NSA/CSS

Policy 9-12, dated DD Month YYYY

ANNEX:

REFERENCE SHEET

Media Type Sanitize Applicable EPLs Notes

Paper

Shred

Disintegrate

Chop, pulverize, or wet pulp to 5 millimeters (mm)

Incinerate: 233 C

NSA/CSS Evaluated Products List

(EPL) for Paper Disintegrators

NSA/CSS EPL for Paper Shredders

Disintegrate or shred paper with approved products for this media type.

Punched Tape Disintegrate

Incinerate: 233 C

NSA/CSS EPL for Punched Tape Disintegrators

Disintegrate punched tape with approved products for this media type.

Toner Cartridges

Disassemble and clean:

• Remove non-volatile memory

• Clean the drum

• Incinerate the fuser

Incinerate: 670 C

NSA/CSS EPL for Solid State Sanitization Devices

Toner cartridge retains a partial image on the OPC (organic photo conductor) drum and the fuser.

Wipe the drum with a rag/cloth or incinerate to remove the partial image. Incinerate the fuser unit.

Remove and sanitize any nonvolatile memory storage devices.

Cathode Ray Tubes (CRTs)

Plasma Monitors

Disintegrate: 50 mm particulate

Clean: Clean inside CRT

None Due to burn-in, the monitor may retain a partial image.

Magnetic Tape

Degauss

Disintegrate: 2 mm particulate

Incinerate: 650 C

NSA/CSS EPL for Magnetic Degaussers

Degauss magnetic tape with approved products for this media type.

Test the magnetic strength before operation.

Hybrid Drives

Disintegrate

Separate circuit board from hard drive, then:

• Follow magnetic Hard Disk Drive

(HDD) procedures to sanitize hard drive.

• Follow Solid-State Information

System Device procedures to sanitize circuit board.

Incinerate: 670 C

NSA/CSS EPL for Magnetic

Degaussers

NSA/CSS EPL for Hard Disk Sanitization Devices and Deformers

NSA/CSS EPL for Solid State Sanitization Devices

Degaussing is not effective for solid-state components within hybrid HDDs.

Degauss magnetic HDD components using an approved product for this media type

Test the magnetic strength before operation.

Magnetic HDDs

Degauss, followed by platter deformation

Disintegrate

Incinerate: 670 C

NSA/CSS EPL for Magnetic

Degaussers

NSA/CSS EPL for Hard Disk Sanitization Devices and Deformers

NSA/CSS EPL for Solid State Sanitization Devices

Degauss magnetic HDDs using an approved product for this media type.

Test the magnetic strength before operation.

All hard drive shredders are approved for platter deformation after the hard drive has been degaussed.

Media Type Sanitize Applicable EPLs Notes

Disintegrate with approved product for this media type.

Heat-Assisted MagneticRecording HDDs (HAMRs)

Incinerate: 670 C

NSA/CSS EPL for Hard Disk Sanitization Devices and Deformers

HAMR products must contain class 1 laser warnings on the exterior of the product.

Sanitize with an approved product for this media type.

Compact Discs

(CDs)

Disintegrate

Emboss/knurl

Grind

Incinerate: 600 C

NSA/CSS EPL for Optical Sanitization

Devices

CDs, digital video discs (DVDs), and Blu-ray discs (BDs) are visually similar. Look for identification markings on the inner mounting rings. If you cannot easily identify a disk, destroy it in accordance with BD requirements.

Sanitize with an approved product for this media type.

DVDs, BDs

Disintegrate

Incinerate: 600 C

NSA/CSS EPL for Optical Sanitization

Devices

CDs, DVDs, and BDs are visually similar. Look for identification markings on the inner mounting rings. If you cannot easily identify a disk, destroy it in accordance with BD requirements.

Sanitize with an approved product for this media type.

Solid-State Devices

Disintegrate

Power removal for 1 hour minimum DRAM (dynamic random-access memory), SRAM (static RAM), volatile FPGA (field programmable gate array)

Incinerate: 500 C

NSA/CSS EPL for Solid State

Sanitization Devices Power removal is only effective on volatile memories. Hold down power button after unplugging equipment to clear capacitors before disassembly.

If you cannot identify the memory within your device, request a statement of volatility from the manufacturer. If available, this document will list all of the volatile memories within your product.

Sanitize with an approved product for the media type.

Magnetic RAM

Disintegrate

Incinerate: 500 C

NSA/CSS EPL for Solid State Sanitization Devices

If you cannot identify the memory within your device, request a statement of volatility from the manufacturer. If available, this document will list all of the volatile memories within your product.

Sanitize with an approved product for the media type.