CISSP GLOSSARY · RISK MANAGEMENT & GOVERNANCE
Data remanence
The residual data that remains on storage media after deletion or formatting, recoverable until the media is properly cleared, purged, or destroyed.
Data remanence is the residual representation of data that survives attempts to delete it. Deleting a file typically removes only the pointer in the file system; formatting a drive rebuilds its structures but leaves most of the underlying data intact. Until media is properly sanitised, anyone who obtains it can recover information whose sensitivity was supposed to be protected across every one of its data states, including the end of its life.
Sanitisation comes in three grades. Clearing (overwriting) defeats ordinary software recovery and suits media staying inside the organisation. Purging (degaussing, or stronger overwrite methods) defeats laboratory recovery and is required before media leaves organisational control. Destruction (shredding, incineration, pulverising) ends the question entirely. SSDs break the traditional ladder: wear levelling silently remaps writes, so overwriting can miss whole cells, and degaussing does nothing because the storage is not magnetic. For SSDs the answer is cryptographic erasure, destroying the encryption key that protected the drive, or physical destruction.
Exam relevance: if a scenario involves disposing of or repurposing an SSD, the answer is crypto-erase or destruction, never overwriting or degaussing. If magnetic media is leaving organisational control, choose purging or destruction over clearing. The nearest confusable is simple deletion: deletion removes the references to data, remanence is what stays behind.