Secure drive transport is the set of controls that protect loose drives and tape in motion: encryption applied by your IT team, continuous chain of custody, and physical protection in transit. A server in transit is large and conspicuous. A drive is small, easily separated from its chassis, and can go missing unnoticed until a reconciliation weeks later.
That asymmetry is why loose media deserves handling that differs from the equipment it came out of. The breach exposure per pound is higher for drives than for anything else in the move, and the detection time is longer.
Why Does Encryption Matter for Drives in Transit?
Encryption, applied by your IT team before the move, is the single most effective control because the data is unreadable if the media is lost.
Full disk encryption with keys held separately means a missing drive is a hardware loss rather than a data breach. Under most breach notification regimes, properly encrypted data that is lost may not trigger notification obligations at all — the safe harbor provisions vary by jurisdiction and framework, but the principle is broadly consistent.
That distinction is worth a great deal. The difference between replacing a drive and notifying a regulator, a customer base, and possibly the press is the difference between an incident and an event.
Confirm the specifics with your IT team rather than assuming. Encryption has to be enabled and actually applied to the data, the keys must be held separately from the media, and the implementation should meet the standard the applicable framework requires. Self-encrypting drives that were never provisioned with a key are not encrypted, and this is a common finding.
Where data cannot be encrypted at rest — legacy systems, certain appliances, some storage architectures — that is a specific risk that needs compensating controls and explicit acknowledgement.
What Does Continuous Chain of Custody Require?
Chain of custody means an unbroken record of who held the media at every moment, with a documented handoff at each transfer.
Record the media by unique identifier at the point of removal — serial number, tied to the system it came from. Inventory at that moment, before anything moves, because the count taken at packing is the baseline everything is verified against.
Every transfer gets signed by both parties: who released it, who received it, when. The gaps in custody records are almost always at transfers, particularly informal ones — the drive handed to a colleague to carry, the box left at a desk overnight.
Reconcile at the destination against the original inventory, item by item rather than by count. A matching total with a substituted item is a reconciliation that passed and should not have.
Which Physical Controls Protect Media in Transit?
Use lockable, purpose-built cases rather than cardboard. Media in a sealed hard case is harder to open casually and obviously tampered with if someone tries.
Apply tamper-evident seals with recorded serial numbers, and check them on receipt against the recorded numbers. A seal nobody verifies is decoration.
Keep media separate from the equipment shipment where the risk justifies it. Drives traveling by a different method than the chassis means a single compromised shipment does not yield both.
For high-sensitivity material, dedicated transport with continuous custody — a courier who does not leave the shipment, a vehicle that is not shared, and in some cases an escort — is proportionate. GPS tracking on the container gives you location evidence and a detection mechanism.
Never leave media unattended in a vehicle. Opportunistic vehicle break-ins are a leading cause of media loss, and it is the failure mode most easily prevented by policy.
Handling and the Media Itself
Drives are sensitive to shock, and a dropped drive may fail in ways that are not immediately visible. Anti-static packaging, individual cushioning, and restraint within the case so items cannot move against each other are all standard.
Tape has environmental requirements that drives do not — temperature and humidity limits, and sensitivity to magnetic fields. Climate-controlled transport is appropriate for tape moving any real distance, and tape left in a hot vehicle can be degraded without any visible sign.
Solid state media has its own consideration: extended periods without power can affect data retention, which matters for archival media in long-term storage rather than for a short move, but is worth knowing.
Documentation and What Comes After
Record what shipped, by identifier, with the custody chain and the arrival reconciliation. For regulated environments, such as healthcare under HIPAA device and media controls, this is a compliance artifact with a retention requirement of its own. For everyone else it is the evidence that establishes what happened if a question arises later.
Where media is being retired rather than relocated, the transport is the precursor to sanitization by a licensed contractor or destruction under NIST SP 800-88, and the custody chain has to run continuously through to the destruction certificate. A gap between "collected for destruction" and "destroyed" is the interval where media goes missing, and it is a well-documented failure pattern in the industry.
Verify destruction certificates against the inventory that was shipped. A certificate listing fewer items than the manifest is the finding that matters, and it is only visible if someone compares the two documents rather than filing the certificate on receipt.