Join our Newsletter — 33% off our NHI Course

Degaussing

Degaussing is the process of erasing the magnetic field on magnetic storage media or devices. It uses a strong alternating or changing magnetic field to scramble stored magnetic information on tapes, disks, and some legacy equipment, making the data unrecoverable through normal means.

What degaussing actually does

Degaussing is a destructive sanitisation method for magnetic media. By applying a strong alternating or changing magnetic field, it disrupts the magnetic domains that encode information, which makes the original data unreadable through normal recovery methods.

It is most associated with tapes and older magnetic disks, but the practical point is broader: the method targets the storage medium itself, not the file system, operating system, or individual files. That is why degaussing sits inside the wider discipline of media sanitisation rather than routine deletion.

Where degaussing fits in media sanitisation

In a secure disposal workflow, degaussing is one possible path to permanent data removal, alongside clearing, purging, destruction, and cryptographic erasure. It is relevant when organisations need to retire magnetic assets that may still contain recoverable information and want a process that does not depend on software-level deletion.

For that reason, guidance on Media Sanitisation Guide is useful when the question is not only what degaussing means, but how it compares with other sanitisation choices and what evidence is expected for secure disposal.

Degaussing is also part of a broader data handling decision. A retention schedule, legal hold, or recordkeeping rule may prevent destruction until the data is no longer needed, while sanitisation standards determine how the media is rendered unrecoverable once disposal is permitted. NHIMG’s Data Retention and Secure Deletion Guide is the natural companion for understanding that boundary.

Why degaussing is effective, and where it is limited

The value of degaussing comes from removing the magnetic pattern that encodes the data itself. If the field is strong enough and the medium is compatible, the stored information cannot be reconstructed by ordinary means, which makes it attractive for end-of-life handling of magnetic assets.

Its limits are just as important. It is a medium-specific technique, so it is not a universal answer for all storage technologies. Organisations need to know which devices are actually magnetic, which contain non-magnetic components, and whether a different sanitisation method is better suited to the asset. That is why the choice between degaussing, erase, purge, and destroy should be driven by media type, assurance needs, and downstream reuse requirements.

The same practical caution applies to modern data-security programmes more generally: if the media cannot be confidently sanitised by magnetic disruption, a different control path is needed. The broader control logic is covered in NIST’s NIST SP 800-53 Rev 5 Security and Privacy Controls, which includes controls for media protection, system integrity, and auditability.

How organisations verify and document secure disposal

For practitioners, degaussing is not just a physical act, it is also an evidence problem. Organisations should be able to show what asset was sanitised, when it was sanitised, by what method, and whether the outcome met policy or contractual requirements. This is especially important when regulated or sensitive information has lived on the device.

Good inventory and disposal records matter because media sanitisation often happens late in the asset lifecycle, after ownership has changed hands or equipment has been pooled into refresh and retirement workflows. Without traceability, it becomes hard to prove that a given drive or tape was actually rendered unrecoverable before resale, return, recycling, or destruction.

For the standards context around destruction and sanitisation evidence, the Data Retention and Secure Deletion Guide and the NIST SP 800-53 Rev 5 Security and Privacy Controls provide useful reference points for control expectations and auditability.

Choosing degaussing over other sanitisation methods

Degaussing is usually chosen when magnetic media must be rendered unusable quickly and thoroughly, and when reuse of the same media is not the goal. It is less about convenience than assurance: the decision is driven by the need to remove data at the medium level, not merely conceal it at the software level.

Practitioners should treat it as one option in a decision tree, not a default. Media type, compatibility, chain-of-custody, and the required strength of evidence all influence whether degaussing is the right control. The best practice is to align the sanitisation method to the asset class and the disposal objective, then document the result in a way that can survive audit or incident review.

When degaussing is the selected route, the important operational question is not whether it sounds secure, but whether it is the right sanitisation method for that specific device and disposal requirement. That is the standard the media sanitisation guidance is designed to help teams apply.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

NIST SP 800-53 Rev 5 and CIS Controls v8 set the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.

Framework Control / Reference Relevance
NIST SP 800-53 Rev 5 MP-6 — Media Sanitization Degaussing is a media sanitization method covered by media disposal controls.
Recommendation — Apply MP-6 to require validated sanitization methods for retired magnetic media.
ISO/IEC 27001:2022 A.7.14 — Secure disposal or re-use of equipment Degaussing supports secure disposal of equipment that stores sensitive information.
Recommendation — Require secure disposal procedures that ensure magnetic media cannot be recovered after retirement.
CIS Controls v8 CIS-3 — Data Protection Degaussing is a data protection disposal measure for legacy storage media.
Recommendation — Use Data Protection safeguards to sanitize or destroy media before release or reuse.