CIS-3.5 Securely Dispose of Data

• T1005 Data from Local System — Secure disposal reduces residual sensitive files on endpoints and servers that an adversary could later collect from local storage. • T1039 Data from Network Shared Drive — Secure disposal reduces obsolete or unnecessary sensitive data left on shared drives, limiting what an adversary can collect from network shares. • T1070.004 File Deletion — The safeguard specifically concerns secure deletion and sanitization of residual data artifacts. • T1213 Data from Information Repositories — Secure disposal reduces stale sensitive records in repositories such as document stores, collaboration platforms, or knowledge bases. • T1485 Data Destruction — Secure disposal directly addresses preventing unauthorized recovery or persistence of sensitive data remnants. • T1530 Data from Cloud Storage — Secure disposal reduces sensitive data retained in cloud object storage, lowering the value of compromised storage access • T1552 Unsecured Credentials — This applies when secure disposal explicitly removes old credential files, keys, exports, secrets, or configuration files that could expose credentials. • T1561 Disk Wipe — This control protects against attacker behaviors that destroy or overwrite data and storage media.