What practice helps prevent reconstruction of disposed CUI?

• A. Delete data without logs.
• B. Archive data before disposal.
• C. Dispose using approved methods to prevent reconstruction; maintain records of disposal when required.
• D. Move data to an alternate system before disposal.

Answer: (C)

Preventing reconstruction of disposed CUI hinges on using disposal methods that actually render data unrecoverable and on documenting the disposal when required. When media is destroyed through approved techniques—such as shredding or pulverizing physical media, cryptographic erasure with keys destroyed, or other recognized methods—the residual data cannot be reconstructed or recovered. Keeping records of disposal provides the necessary accountability and evidence that the data was handled and destroyed according to policy or regulation, which is often a compliance requirement.

Deleting data without logs leaves no verifiable evidence and can leave traces that might be recovered by skilled methods or from backups. Archiving before disposal means you’re preserving a copy somewhere rather than ensuring destruction of the original, which defeats the goal of preventing reconstruction. Moving data to another system before disposal transfers the risk rather than eliminating it. The combination of approved destruction methods plus proper disposal records directly addresses both the technical and administrative aspects of secure disposal.