First choice should always be Secure Erase, DBAN is second choice. Best practice is to use Secure Erase and then 1 pass of random data from DBAN, for defense in depth (in case Secure Erase fucks up and you don't notice).