Which of the following is MOST critical in a contract in a contract for data disposal on a hard drive with a third party?

Authorized destruction times relate to scheduling and logistics but do not directly ensure the thoroughness or security of the actual data destruction process.

Unallocated disk space is a storage concept unrelated to the contractual requirements for secure data destruction methodology or verification.

The number of overwrites required directly determines the effectiveness of data sanitization; standards like DoD 5220.22-M and NIST SP 800-88 specify overwrite passes to ensure data cannot be forensically recovered. Contractually defining this requirement holds the third party accountable to a specific, measurable destruction standard, protecting the organization from data breaches resulting from inadequate sanitization.

Frequency of recovered media is not a standard contractual term for data disposal; it does not define how data is destroyed or verify that destruction meets a security baseline.