Protecting Sensitive Information Processed and Stored in Information Technology (IT) Systems | NIST

Information systems capture, process, and store information using a wide variety of media. Information is recorded on data storage media and on the devices that create, process, or transmit the information. This information must be protected from creation to disposal in a way that is appropriate to the sensitivity and value of the information. When they discard media and devices, organizations and individuals should make sure that proper techniques are used to remove the data, or to destroy the media, to protect the confidentiality of the information.