How should CUI be destroyed?

• A. By secure destruction methods (e.g., shredding, wiping, incineration) that render the information unreadable.
• B. By deleting files on a computer without shredding.
• C. By moving it to an archive for long-term storage.
• D. By copying to another secure location without destruction.

Answer: (A)

Destruction of CUI requires rendering the information unreadable and irrecoverable. That means using secure destruction methods appropriate to the medium: shredding or incineration for paper, and sanitization methods for digital media (such as cryptographic erasure, overwriting, or physically destroying the storage device) so that the data cannot be reconstructed or recovered. Merely deleting a file or moving it to an archive does not achieve irrecoverability, and copying to another secure location leaves the original data accessible. Following secure destruction practices minimizes risk and aligns with standards and DoD CUI guidance.