ISO/IEC 21964-3:2018

Information technology — Destruction of data carriers — Part 3: Process of destruction of data carriers

This standard defines the requirements for the process of destruction of data carriers and is applicable for the responsible authority and for all parties who are involved in the destruction process.

Technologies de l'information — Destruction de véhicules de données — Partie 3: Processus de destruction des supports de données

General Information

• Status: Published
• Publication Date: 29-Jul-2018
• ICS: 35.030 - IT Security
• Technical Committee: ISO/IEC JTC 1 - Information technology
• Drafting Committee: ISO/IEC JTC 1 - Information technology
• Current Stage: 9060 - Close of review
• Start Date: 04-Mar-2029

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 21964-3
First edition
2018-08
Information technology — Destruction
of data carriers —
Part 3:
Process of destruction of data carriers
Technologies de l'information — Destruction de véhicules de
données —
Partie 3: Processus de destruction des supports de données
Reference number
ISO/IEC 21964-3:2018(E)
©
ISO/IEC 2018

---------------------- Page: 1 ----------------------
ISO/IEC 21964-3:2018(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2018
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Fax: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO/IEC 2018 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 21964-3:2018(E)

Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Processing . 1
3.1 General . 1
3.2 Process definition . 2
3.3 Determination of the risk structure . 2
3.4 Process execution . 3
3.5 Inspection and testing . 3
3.5.1 Requirements to the data controller . 3
3.5.2 Process reliability . 3
3.5.3 Requirements to certificates of service providers . 4
4 Process criteria . 4
4.1 General . 4
4.2 Criteria for all varieties of data carrier destruction . 4
4.3 Criteria for variety 1 . 4
4.4 Criteria for variety 2 . 5
4.5 Criteria for variety 3 .
...