Which is NOT part of data-bearing device handling (DBD)?

• A. Erasure
• B. Tracking
• C. Secure chain-of-custody
• D. Public data sharing

Answer: (D)

Data-bearing device handling focuses on securely managing devices that store information throughout their lifecycle, ensuring data remains confidential, intact, and usable only by authorized parties. Erasure is a key part because sanitizing data before disposal or reuse prevents recovery. Tracking helps keep accurate inventory and know exactly where a device is and who has it. Secure chain-of-custody ensures the device’s integrity and accountability when it moves between people or locations, preventing tampering.

Public data sharing isn’t a handling procedure for devices that carry data. Sharing data with the public relates to data governance and dissemination policies, not the secure handling and lifecycle management of the device itself. Therefore, it is not part of data-bearing device handling.