Solid State Drives (SSDs) comes with many benefits, but they also have security risks. See our research study highlights to learn more, or navigate to the full study, here: http://bit.ly/2jEz9aB

1. © 2017 Blancco Oy Ltd. All Rights Reserved.
Research Study Highlights:
Security Limitations of SSDs

2. © 2017 Blancco Oy Ltd. All Rights Reserved.
About the Survey
Blancco wanted to know more about the data security challenges and
limitations businesses face managing solid state drives (SSDs).
We surveyed over 300 IT professionals in the U.S., Canada, Mexico,
UK, France, Germany, Indian, Japan and China in December 2016 to
get their thoughts.
Survey respondents came from businesses in the retail, healthcare,
transportation, banking/financial, government/public sector and
education industries.
2

3. © 2017 Blancco Oy Ltd. All Rights Reserved.
Survey Highlights

4. © 2017 Blancco Oy Ltd. All Rights Reserved.
• According to TrendFocus,
shipments of SSDs in the second
quarter of 2016 hit 33.7 million
units.
• Our survey found that 68 percent
of organizations use SSDs or
flash-based storage for their
desktop/laptop computers, while
17 percent use SSDs in their
servers.
4
SSD Sales are Up:

5. © 2017 Blancco Oy Ltd. All Rights Reserved.
So how do companies protect the data on their SSDs?
5

6. © 2017 Blancco Oy Ltd. All Rights Reserved.
To Encrypt or Not to Encrypt?
When asked which methods their organizations currently use to
prevent data loss/theft from SSDs, 70 percent of IT professionals
said they encrypt drives.
…But encryption may not be enough.
6
*Image from wisegeek.com

7. © 2017 Blancco Oy Ltd. All Rights Reserved.
Security Issues with Encryption
7
1. SED management software is not able to use the combination of
techniques required to safely sanitize the data on SSDs. This is due to the
total reliance on crypto erase. If there is an error in in the crypto system or
handling of the encryption key, the data isn’t properly erased.
2. SED management software does not verify that the asset is erased. If
the data has not been erased, then it is left exposed and could lead to a
potential data breach.
3. The typical erasure report generated by SED management software is
minimal and only includes a single line of text on the log page. As a result,
SED management software or other similar software

8. © 2017 Blancco Oy Ltd. All Rights Reserved.
Considering re-formatting?
• Additionally, 35 percent of the surveyed organizations said they reformat
SSDs as a means of preventing data loss/theft.
• However, formatting a drive doesn’t actually erase the data. It only
creates a file system so new data can be written to the volume. So the old
data is still left in tact and recoverable.
8

9. © 2017 Blancco Oy Ltd. All Rights Reserved.
Most Organizations Let External Vendors Decide
• Most organizations trust IT asset
disposition vendors to dispose of their
end-of-life SSDs.
• 49 percent of these organizations
consider efficiency and cost to be the
most important factors when selecting
an ITAD vendor.
9

10. © 2017 Blancco Oy Ltd. All Rights Reserved.
• Only 16 percent of organizations
factor in the ITAD vendor’s
ability to permanently remove all
data.
• And 27 percent don’t have a
formal process to monitor how
their ITAD vendors erase data
from SSDs.
10
But Whom Should You Trust?

11. Want more?
Download the full research study here:
http://bit.ly/2jEz9aB