Which components are included in handling data-bearing devices (DBD)?

• A. Backups, encryption, access control
• B. Regular backups, encryption, and user access control
• C. Erasure, tracking, and secure chain-of-custody.
• D. Data compression, archiving, and retrieval speed

Answer: (C)

Handling data-bearing devices focuses on what happens to the device as it moves through its lifecycle. The essential actions are erasure (sanitizing the device so no recoverable data remains before disposal or repurposing), keeping a precise record of where the device is and who handles it (tracking), and maintaining a secure chain-of-custody that documents every handoff and action. This combination directly mitigates the risk of data exposure and ensures accountability. While backups, encryption, and access controls are important for protecting data during use, they aren’t the specific elements of the physical handling process for data-bearing devices. Data compression, archiving, and retrieval speed relate to data management and performance rather than secure handling of the device itself.