[2] IS5 sets a wide range of requirements—not just the technical detail of overwriting data, but also the policies and processes that organisations should have in place, to ensure that media are disposed of securely.
IS5 also touches on risk management accreditation, because secure reuse and disposal of media is an important control for organisations handling high-impact data.
With some inexpensive media, destruction and replacement may be cheaper than sanitisation followed by reuse.
Different methods apply to different media, ranging from paper to CDs to mobile phones.
Four different outcomes are considered: Stricter requirements apply to data with a stronger protective marking or IL.