Which of the following describes appropriate destruction methods for CUI?

• A. Destroying by simply deleting the file.
• B. Discarding in normal trash after removing metadata.
• C. Leaving backups intact and not destroying.
• D. Destroy by secure methods (e.g., shredding, wiping, incineration) that render unreadable.

Answer: (D)

CUI must be destroyed in a way that makes the data unreadable or unrecoverable after disposal. Simply deleting a file doesn’t remove the underlying data from the storage device; remnants can remain and be recovered with forensic tools. Discarding in normal trash is unsafe because devices or media could be retrieved and recovered, exposing the information. Leaving backups intact means there are copies elsewhere that could still disclose CUI, defeating secure disposal. The correct approach uses secure destruction methods that render unreadable, such as shredding physical media, wiping or overwriting electronic media to approved standards, or incineration when appropriate. This ensures no usable data remains on the primary device or any copies, aligning with CUI protection requirements.