Data remanence

Data remanence is the residual representation of data that survives attempts to delete it. Deleting a file typically removes only the pointer in the file system; a quick format rebuilds the drive’s structures but leaves most of the underlying data intact. Until media is properly sanitised, anyone who obtains it can recover information whose sensitivity was supposed to be protected across every one of its data states, including the end of its life.

NIST SP 800-88 Rev. 2 sorts sanitisation into three methods. Clearing, typically by overwriting, defeats ordinary software recovery and suits media staying inside the organisation. Purging, through the drive’s own sanitize commands, cryptographic erase or, for suitable magnetic media, degaussing, defeats laboratory recovery and is commonly expected before media leaves organisational control. Physical destruction (disintegration, incineration, melting and similar) also defeats laboratory recovery and leaves the media unusable. SSDs break the traditional ladder: wear levelling silently remaps writes, so host-based overwriting can miss whole cells, and degaussing does nothing because the storage is not magnetic. For SSDs the usual choices are the drive’s own sanitize command, cryptographic erase, which destroys the encryption key that protected the drive, or physical destruction.

Exam relevance: a scenario may involve disposing of or repurposing an SSD. Candidates are expected to prefer cryptographic erase, a device sanitize command or destruction, and to reject host-based overwriting and degaussing. Where magnetic media is leaving organisational control, purging or destruction is expected over clearing. The nearest confusable is simple logical deletion: deletion removes the references to data, remanence is what stays behind.