TMCnet News

DriveSavers Guarantees Data Security Compliance with Updated NIST Guidelines for Controlled Unclassified Information
[August 25, 2016]

DriveSavers Guarantees Data Security Compliance with Updated NIST Guidelines for Controlled Unclassified Information


DriveSavers, the worldwide leader in data recovery, eDiscovery and digital forensic services, announces compliance with the latest NIST regulations designed to protect controlled unclassified information (CUI) outside the government.

Published in 2015, NIST Special Publication 800-171: Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations, applies to components of nonfederal information systems and organizations that process, store or transmit CUI, or provide security protection for these components.

"We understand that it's absolutely essential for our customers to know that DriveSavers can protect the integrity of their data," explained Michael Hall, chief information security officer at DriveSavers. "Each year, DriveSavers undergoes an annual SOC 2 Type II audit of internal data hosting and process controls to guarantee our data recovery services uphold the stringent data security and privacy protocols mandated by the government agencies we serve. All the guidelines outlined in NIST SP 800-171 are covered by this audit."

Over the last 30 years, DriveSavers has worked extensively with law enforcement agencies to provide legally defensible investigations and reports, and has experience understanding and interpreting data from all types of digital devices and operating systems. DriveSavers is the only data recovery service provider in the industry to post proof that it undergoes an annual SOC 2 Type II audit, which qualifies their security practices to handle enterprise-class recoveries and support thoe customers who must maintain compliance with data privacy and data security regulations including:



  • NIST (National Institute of Standards & Technology) SP 800-171
  • NIST (National Institute of Standards & Technology) SP 800.34 (Rev.1)
  • HIPAA (Health Insurance Portability and Accountability Act)
  • FERPA (Family Educational Rights and Privacy Act)
  • SOX (Sarbanes-Oxley Act of 2002)
  • GLBA (Gramm-Leach-Bliley Act of 1999)

Not only is security compliance essential for enterprise-level multi-drive devices like RAID, NAS and SAN devices, but for all data storage devices. That includes smartphones. "The smartphone ubiquity in today's world means that they're increasingly part of government and law enforcement investigations," explained Rene Novoa, manager of eDiscovery and digital forensics at DriveSavers and vice president of the HTCIA Bay Area Chapter (BAC). "As government agencies look to cyber security and DFIR professionals to help with their investigations, strong security measures are essential."

On Aug. 30 starting at 1 p.m. at the annual HTCIA International Conference and Training Expo, Novoa will speak on advanced mobile forensics and how to overcome physical challenges with laboratory services. The largest conference for cyber security and DFIR professionals, the HTCIA Conference will be held at the J.W. Marriott Las Vegas from Aug. 28-31.


To learn more about DriveSavers digital forensic expertise, visit booth #306 at the HTCIA Conference or go to www.drivesaversdatarecovery.com.

About DriveSavers

DriveSavers, the worldwide leader in data recovery, eDiscovery and digital forensics, provides the fastest, most reliable and only certified secure data recovery and eDiscovery service in the industry. All of the company's services meet security protocols for financial, legal, corporate and healthcare industries, and it is the only company that posts proof of its annual SOC 2 Type II audit and HIPAA data security and privacy compliance. DriveSavers adheres to U.S. government security protocols, the Gramm-Leach-Bliley Act (GLBA) Data Security Rule, the Data-At-Rest mandate (DAR) and the Sarbanes-Oxley Act (SOX). DriveSavers engineers are trained and certified in all leading encryption and forensic technologies and operate a Certified ISO Class 5 Cleanroom. Customers include: Bank of America, Google (News - Alert), Lucasfilm, NASA, Harvard University, St. Jude Children's Research Hospital, U.S. Army and Sandia National Laboratories.


[ Back To TMCnet.com's Homepage ]