What to look for in an ITAD provider

 

With strong new privacy regulations about to go into effect in Europe and pressure growing for measures in the US, there has never been more at stake in protecting sensitive digital information all the way through its lifecycle – including disposal.

 

IT Asset Disposition (ITAD) is a program that safely disposes of IT assets having e-waste such as old PCs, tablets, servers and disk drives in a way that guarantees against inadvertent disclosure of data. In some cases, the equipment may be destroyed through shredding or grinding. Or it may be cleaned and re-sold, with the customer receiving a percentage of the residual value. No matter how equipment is disposed of, the data should be secured, and the assets tracked and documented at every stage of the disposal process.

 

When faced with a mountain of old computer equipment, it's a natural impulse for an IT manager to simply want to find someone who will make it all go away. But disposing of IT assets isn't the same as throwing out old desks and chairs. Computers, disk drives, cell phones, flash drives and even printers may contain sensitive data, vulnerable to being breached, which could leave a company facing lawsuits, regulatory action and brand damage.

 

Deleting data or formatting storage media is no protection. Those processes simply remove digital pointers to data, but they don't delete much of the data itself. Even disk drives that have been formatted multiple times may still have plenty of recoverable information.

 

ITAD is a specialised discipline that incorporates multiple checkpoints, protections and an audit trail, as well as verification of data erasure and asset destruction. John Sharpe, Director of Product Management at Iron Mountain, suggests seeking ITAD providers that employ the following practices to make the process secure (SITAD):

 

Auditable process and workflow - Each item marked for disposal should be logged in an inventory and tracked through the entire disposal process. A best practice is to affix a scan code at the point of surrender and scan the tag at each handoff point. The inventory management system should flag any missing items and create an exception report. The customer should be able to audit the process at any time.

 

Secure logistics, transportation and vehicles - Equipment is never more vulnerable than when it's in transit. Items can fall off open truck beds, and unlocked vans are an invitation to thieves. Look for ITAD providers that use closed, secured transportation and secure handoff points monitored by closed-circuit cameras.

 

Visibility into project status - Customers should never be in the dark about the status of their surrendered equipment. An online tracking system, like that used by package delivery services, should enable customers to identify the precise location and status of their equipment whenever they desire.