Use the current publication as a starting point

NIST SP 800-88 Revision 2, published in September 2025, supersedes Revision 1. It addresses establishing a media-sanitization program and choosing suitable controls according to information sensitivity. It is guidance for the process; citing its name does not by itself demonstrate that a particular device was handled correctly. Link your procurement questions to the actual equipment and the records you need.

Ask what happens to your specific media

Give the provider the media types and required outcome. Ask which method will be used, how it is selected, and how its completion will be documented. A general statement about hard drives may not answer questions about a mixed lot containing different storage technologies. Have your responsible IT or security staff approve the agreed scope.

Ask how exceptions are handled

A failed device, unreadable identifier, or mismatch between the release list and received equipment should have a clear resolution path. Ask who will contact you, what supporting record will be retained, and whether an exception affects the final documentation. Put those questions into the project plan before equipment changes hands.

Keep vendor statements connected to evidence

Retain the agreed method, release inventory, custody information, and final records together. Avoid treating a website logo as a substitute for project documentation. Stark can review NIST SP 800-88 Revision 2 destruction requirements with your business equipment inquiry. Share the media types and certificate fields your organization requires so the team can confirm an appropriate service scope before scheduling.

Quick checklist

  • Identify media types.
  • Approve the handling scope.
  • Review completion records.

Common question

Does quoting a NIST publication replace project records?

No. A reference to guidance is a starting point for reviewing the process. Your organization should still confirm the agreed method, identifiers, handling arrangements, and supporting records for its equipment. Keep those details connected to the approved scope and follow up on exceptions.

Further reading

Ready to plan your business pickup?

Send your equipment list, collection address, and data-handling needs. Stark will confirm accepted items, qualifying free service, and collection availability before scheduling.

Request a Business Pickup →

Related service: Explore the related Stark service