A leasing firm wants 400 laptops back in two weeks. IT plans a quick format before shipping. No sanitization standard exists and the laptops held regulated client data. What should the security manager do FIRST?
A. Quick format each laptop and keep signed return manifests
B. Define sanitization requirements from the data classification held
C. Physically destroy every drive before the laptops ship
D. Negotiate an extension to allow full disk wiping
(Explain your answer for more points in the comments!)