Page 51 - index

 Proof of internal information technology controls and data security safeguards, such as
annual SOC 2 Type II audits
 Training and awareness programs for employees to ensure sensitive and confidential
data is protected
 Engineers trained and certified in all leading encryption software products and platforms
 Proof of Chain of Custody documentation and certified secure network
 Vetting and background checks of all employees
 Secure and permanent data destruction when required
 Use of encryption for files in transit
 Proof of a certified ISO Class 5 Cleanroom

By implementing these four steps, companies can protect themselves against a data breach by
closing the security gap in the data recovery process. With a thoroughly vetted data recovery
company as part of the security protocol of a business continuity, disaster recovery and incident
response plan, companies are able to act quickly and securely in the case of an unexpected
data loss emergency

About the Author

As Chief Information Security Officer (CISO) and Director of eDiscovery
and Digital Forensics, Michael Hall directs and implements policies and
procedures concerning the privacy and security of all data received at
DriveSavers, including highly critical data from government agencies,
major corporations and research laboratories. Hall was instrumental in
helping NIST, FDIC, OTS and BITS identify the risks of improper
screening of data recovery providers.

In his previous role as Director of PC Engineering, Michael developed
security protocols to handle critical and encrypted data for corporate and government accounts.
He also developed and managed the ISO Class 5 certified Cleanroom, the largest and most
technologically advanced in the data recovery industry. Hall has over 17 years experience in
data recovery technology, focusing on high-end arrays, and has successfully recovered data
from over 15,000 storage devices. Michael Hall has been trained and certified by the leading
encryption vendors and is a certified eDiscovery and forensic investigator. Prior to joining
DriveSavers in 1995, Hall was a Data System Engineer for the U.S. Navy. His responsibilities
included computer hardware and software support for Intelligence Gathering Platforms.

I25B /1B>9>7C &171J9>5 M +5@D5=25B 49D9?>
?@IB978D K I25B 565>C5 &171J9>5 << B978DC B5C5BF54 G?B<4G945