risk
Residual data on improperly disposed or re-used media
Retrieval of recycled or discarded media, and disposal/reuse of storage without proper erasure, exposes residual sensitive information; also insecure/incomplete data deletion in multi-tenant/cloud environments.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- category
- privacy
- domain
- Data Protection & Privacy
- Asset Management & Inventory
- taxonomy
- iso-27005-threat
- iso-27005-vulnerability
- nist-800-30-threat-event
- inherent_rating
- medium
Details
- risk_id
- data-residual-media-disposal
- category
- privacy
- likelihood
- medium
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- iso-27005-threat
- iso-27005-vulnerability
- nist-800-30-threat-event
Source
No record-specific source URL is provided.
Connections
- UC-ASSET-04 — Control storage media through use, storage, and destruction mitigates Residual data on improperly disposed or re-used media
- strength
- primary
- rationale
- Sanitizing/destroying media before disposal or reuse and verifying unrecoverability directly prevents residual-data exposure.
- UC-DATA-10 — Protect physical media containing sensitive data mitigates Residual data on improperly disposed or re-used media
- strength
- primary
- rationale
- Sanitizing media to its highest classification before downgrade/reuse/release directly prevents residual-data exposure on re-used media.
- UC-ASSET-03 — Classify, prioritize, and label information and assets mitigates Residual data on improperly disposed or re-used media
- strength
- related
- rationale
- Marking media by classification drives correct secure-disposal handling of sensitive media before release.
- UC-DATA-09 — Retain personal and confidential data per schedule, then destroy it mitigates Residual data on improperly disposed or re-used media
- strength
- primary
- rationale
- Irreversible destruction preventing reconstruction wherever data resides, including external services, directly eliminates residual data on disposed/reused storage.