NSA/CSS Policy Manual 9-12 — Storage Device Sanitization & Secure Data Erasure Software

NSA/CSS Policy Manual 9-12 provides guidance for the secure disposition of information-system storage devices.

The manual is associated with:

• Storage-Device Sanitization
• Secure Disposal
• Recycling
• Classified And Sensitive Information Protection
• Media-Specific Sanitization
• Sanitization Equipment
• Destruction Procedures
• NSA/CSS Evaluated Products Lists

The NSA's Center for Storage Device Sanitization Research (CSDSR) maintains guidance and evaluated-product information for storage-device sanitization and destruction.

Unlike historical wiping methodologies that are commonly described by a fixed number of software overwrite passes, NSA/CSS Policy Manual 9-12 is broader than a single overwrite sequence.

The policy framework covers information-system storage devices used by NSA/CSS elements, contractors and personnel.

The publicly released policy documentation identifies storage formats including:

• Magnetic Storage
• Solid-State Storage
• Optical Storage
• Hard-Copy Media
• Hybrid Storage Technologies

The associated policy statement describes processes for the sanitization and release of information-system storage devices, while the manual provides the detailed sanitization and disposition guidance.

This technology-specific approach is important because the correct sanitization technique depends on how information is physically and logically stored.

A common misconception is to treat NSA/CSS 9-12 as another fixed multi-pass overwrite method such as Gutmann, Schneier, HMG IS5 or historical DoD overwrite profiles.

That is not the correct technical framing.

NSA/CSS Policy Manual 9-12 provides a broader framework around storage-device sanitization and destruction.

The appropriate process can depend on:

1. 01Information Sensitivity
2. 02Storage Technology
3. 03Sanitization / Destruction Requirement
4. 04Approved Technique Or Equipment
5. 05Verification / Control
6. 06Documentation

The NSA's current public guidance also maintains Evaluated Product Lists for equipment meeting NSA specifications, including categories such as HDD destruction devices, magnetic degaussers and solid-state disintegrators.

DSP provides a dedicated NSA/CSS Policy Manual 9-12 Sanitization Method within the DSP Sanitization Engine.

IDENTIFY Identify the target storage device.

CLASSIFY Determine storage technology and relevant device characteristics.

ASSESS Assess device accessibility, health, errors and applicable sanitization conditions.

SELECT Select the NSA/CSS Policy Manual 9-12 method.

EXECUTE Execute the applicable DSP sanitization operation.

VERIFY Verify the recorded sanitization result.

VALIDATE Determine whether the result satisfies the applicable organizational requirement.

DOCUMENT Record device, method, operator, system and verification information.

CERTIFY Generate an audit-ready sanitization certificate documenting the operation performed.

NSA/CSS 9-12 is particularly relevant because storage technologies do not all behave the same way.

Traditional magnetic hard disk drives can support sanitization techniques based on their magnetic storage architecture and applicable organizational requirements.

DSP can record:

• Manufacturer
• Model
• Serial Number
• Capacity
• Interface
• Firmware
• SMART Information
• Health Condition
• Read/write Errors
• Bad Sectors
• Sanitization Status
• Verification Result

Modern SSD and NVMe devices use controller-managed flash architectures.

Relevant characteristics can include:

• Flash Translation Layer
• Wear Leveling
• Spare Blocks
• Over-Provisioning
• Garbage Collection
• Remapped Storage
• Controller-Level Sanitization Commands

Consequently, a conventional host-level overwrite should not automatically be presented as equivalent to complete physical sanitization of an SSD or NVMe device.

The applicable device-specific sanitization capability and organizational security requirement should be assessed before execution.

NSA/CSS 9-12 also covers storage technologies beyond conventional HDDs. The NSA maintains evaluated equipment categories for multiple media types, including optical destruction and solid-state disintegration.

One of the most important characteristics of the NSA/CSS approach is the distinction between sanitization and physical destruction.

Sanitization attempts to render stored information inaccessible according to the applicable security requirement while potentially allowing the media to remain usable.

Destruction physically compromises the storage medium so that recovery of the information is prevented according to the applicable destruction requirement.

For certain high-security or technically unsuitable storage devices, destruction may be the required disposition rather than conventional software wiping.

The current NSA Evaluated Products Lists include dedicated categories for:

• HDD Destruction
• Magnetic Degaussing
• Optical Destruction
• Solid-State Disintegration
• Paper Destruction
• Other Media Destruction Equipment

NSA/CSS maintains Evaluated Products Lists (EPLs) identifying equipment that meets applicable NSA specifications.

The NSA explains that these lists apply to NSA/CSS elements, contractors and personnel and are used in connection with Policy Manual 9-12 disposal or recycling activities.

This creates an important distinction for DSP:

The website should never use phrases such as:

• “NSA Certified Software”
• “NSA Approved Software”
• “NSA Evaluated DSP”
• “NSA EPL Certified”

unless a separate official evaluation exists.

Professional sanitization begins with understanding the device being processed.

DSP can collect and document information such as:

DSP can identify and report:

• Logical Bad Sectors
• Physical/read Errors
• Unreadable Regions
• Reallocated Sectors
• Write Failures
• Verification Failures
• Device-Health Anomalies

If the required sanitization operation cannot be reliably completed, the result should be evaluated against the organization's applicable security and disposition policy.

This is especially important for:

• Failing HDDs
• Damaged SSDs
• Degraded Flash Media
• Storage Devices With Inaccessible Areas
• Devices Exhibiting Repeated Write Failures

DSP separates verification from validation.

The NSA/CSS policy documentation specifically addresses storage devices containing information ranging from UNCLASSIFIED to TOP SECRET, including compartmented, sensitive and limited-distribution information.

This makes the policy fundamentally different from consumer-oriented “delete” or “format” functionality.

A professional sanitization workflow must consider:

• Information Sensitivity
• Media Type
• Sanitization Method
• Device Condition
• Verification
• Release/disposition
• Documentation
• Applicable Organizational Controls

NSA/CSS Policy Manual 9-12 specifically provides guidance for sanitization of storage devices intended for disposal or recycling.

This makes the methodology relevant to controlled asset-disposition environments where organizations need documented evidence that storage devices were processed before leaving their controlled environment.

Potential applications include:

• Government IT Asset Disposal
• Defense Organizations
• Secure Data Centers
• Enterprise ITAD
• Government Contractors
• Sensitive-Lab Environments
• Controlled Equipment Recycling
• Storage-Device Retirement

DSP can generate an audit-ready sanitization certificate documenting the operation performed by the DSP Sanitization Engine.

The certificate can include:

Both frameworks emphasize that storage sanitization must be considered in relation to the storage technology and security requirement, but they originate from different organizations and serve different policy environments.

NIST SP 800-88 Rev. 2 is a separate current media-sanitization publication and should not be represented as identical to NSA/CSS Policy Manual 9-12.

Sensitive environments may require sanitization without Internet connectivity.

DSP supports controlled offline operation for environments such as:

• Government
• Defense
• Law Enforcement
• Secure Laboratories
• Data Centers
• ITAD Facilities
• Restricted Enterprise Environments

Device processing and sanitization records can be generated locally without requiring the target device to be connected to the public Internet.

Enterprise and ITAD operations may involve multiple storage devices.

DSP can maintain device-specific records so that each processed device has its own:

1. 01Device Identity
2. 02Method
3. 03Sanitization Operation
4. 04Verification
5. 05Result
6. 06Certificate

This allows organizations to maintain individual device traceability rather than relying on a single batch-level record.

DSP provides a dedicated workflow for organizations that need to document an NSA/CSS Policy Manual 9-12-based sanitization process.

• Dedicated NSA/CSS 9-12 Sanitization Method
• Device Identification
• Storage Technology Assessment
• SMART/device Health
• Bad-Sector Detection
• Sanitization Monitoring
• Verification
• Validation Workflow
• Offline Processing
• Multi-Device Processing
• Operator Tracking
• Audit Metadata
• PDF/HTML Reports
• Audit-Ready Sanitization Certificate

DSP should be positioned accurately:

NSA/CSS Policy Manual 9-12 is an NSA/CSS storage-device sanitization and destruction manual.

DSP provides a dedicated software sanitization method and documents the operation executed by its Sanitization Engine.

DSP certification documents the actual operation performed by DSP.

It does not mean:

• NSA Certification
• NSA/CSS Certification
• NSA EPL Listing
• U.S. Government Certification
• Approval To Process Classified Information

unless such authorization or evaluation is separately established.

Modern storage sanitization cannot be reduced to a simple “number of passes.”

A professional workflow considers:

This technology-aware approach is central to professional storage-device sanitization.

NSA/CSS Policy Manual 9-12 provides a structured framework for secure storage-device sanitization and destruction within the NSA/CSS environment.

DSP brings that policy reference into a modern software workflow with:

1. 01Identify
2. 02Classify
3. 03Assess
4. 04Select
5. 05Execute
6. 06Verify
7. 07Validate
8. 08Document
9. 09Certify

The result is a controlled, traceable and documented sanitization operation.