Compliance · NIST SP 800-88 Rev. 2
NIST SP 800-88 Rev. 2 data sanitization, explained
NIST SP 800-88 Rev. 2 (September 2025) is the current U.S. government guideline for media sanitization. It replaces Rev. 1 from 2014 and focuses on running a sanitization program: deciding how sensitive the data is, choosing clear, purge or destroy, and documenting the result. For media-specific techniques, Rev. 2 points to industry standards such as IEEE 2883.
- MBE certifiedNMSDC
- i-SIGMA memberSecure data destruction
- CSDS-ledCertified Secure Data Specialist
- NIST SP 800-88 Rev. 2Aligned media sanitization
What you get
Clear
Logical overwriting, suitable for lower-risk reuse.
Purge
Cryptographic erase or firmware-level sanitize for sensitive data.
Destroy
Shredding or disintegration when media leaves your control or is damaged.
Retire devices with proof
Tell us roughly how many devices and your ZIP. We reply with a pickup quote and a date.
Frequently asked questions
What changed in Rev. 2?
Rev. 1 centered on media-specific technique tables. Rev. 2 centers on protecting sensitive information through an organization-wide sanitization program, adds a decision flow for choosing a method, covers newer storage such as cloud, and refers to industry standards like IEEE 2883 for technique details.
What is IEEE 2883?
An industry standard that sets technical sanitization requirements for specific storage media. NIST SP 800-88 Rev. 2 is the program-level guideline; IEEE 2883 is a complementary technical reference.
Which method should I use?
It depends on how sensitive the data is and whether the device will be reused. Highly sensitive or damaged media should be purged or destroyed.
Does NIST SP 800-88 require a certificate?
The guideline calls for documenting sanitization. A Certificate of Data Destruction is the common way to record the method, verification and applicable standard.
Related
Retire devices with proof
Tell us roughly how many devices and your ZIP. We reply with a pickup quote and a date.