Don’t store equipment in need of secure decommissioning. Make it a
priority to get it done, so the equipment doesn’t end up being neglected
for weeks, months, or years — until someone gets an opportunity to
compromise your security by making use of sensitive data stored on it.
Don’t leave it running unnecessarily, either. You don’t want yet another
system running on your network, waiting to get compromised by a security
cracker or malware, when you don’t actually have any use for the system.
Clear configuration settings on networking equipment
Managed switches, authenticating serial console servers, and other
“smart” network infrastructure devices can provide clues to a clever
security cracker on how best to break into your network and the systems
that reside on it.
Control access to the equipment
Establish clear guidelines for who should have access to any equipment
in need of secure disposal. Track a “chain of custody” to help ensure
that nobody who shouldn’t have access to it before disposal gets his or
her hands on it.
Track equipment contents
Track the physical contents of every computer and piece of network
infrastructure equipment in your organization so you won’t make the
mistake of overlooking a storage device. Remember that even volatile RAM
can serve as a “storage device” for sensitive data under limited
conditions. Ultimately, you should just adopt an attitude of practical
paranoia about sensitive data storage and act accordingly.
Persistent security
Don’t fall into the trap of meticulously securing your running systems,
then getting compromised or having sensitive data recovered because you
didn’t put any thought into securing the systems slated for disposal.
The need for good security practice doesn’t go away when you turn off
the computer.
Keep the environment in mind when disposing of your computer. Most
computer equipment contains hazardous materials that don’t belong in a
landfill. For example, many computers have heavy metals that can
contaminate the earth. The EPA recommends that you check with your local
health and sanitation agencies for ways to dispose of electronics safely.
Ensure that you eliminate any accounts or other access control facilities
that are associated with the decommissioned equipment. You don’t want an
ex-employee still getting into his old workstation after he’s not supposed
to have access to it any longer, and you don’t want lingering network
access accounts used to remotely connect to the computer providing more
“target surface” for security crackers when you don’t need the account at
all any longer. You should generally do this first.
Delete files securely
Don’t assume that taking hard drives to the landfill is secure. If there’s
sensitive data on your drives, you need to get rid of it before taking it
away. Even if you don’t think there is any sensitive data on the drive,
consider whether you’re willing to bet the business on that — and if not,
do more than just chuck the drive in the bin. Even reformatting or
repartitioning a drive to “erase” the data it stores isn’t good enough
these days (if it ever was).
Clearly identify decommissioned systems
Make sure you have clear, physical indicators of whether a system has been
fully decommissioned in a secure manner, and that they don’t consist of
something easily misplaced or overlooked like a sticky note. It’s best if
computers that haven’t been fully decommissioned are kept in a specific
location, while decommissioned equipment goes somewhere else, so that
habits you develop will help you avoid making mistakes. For instance,
perhaps workstations should be kept on desks and servers in racks until
they’re cleared (and they should probably stay there until they’ve had
their drive contents shredded, at least, because they’re already set up
with power and whatever interface is normal for that system). Doing so can
lend a sense of urgency to the need to securely decommission the
equipment, too, because you’ll feel the pressure of wanting to clear the
space for other uses.
ABOUT US:
Data Protection is Our #1 Priority
Many companies simply live with the clutter of obsolete electronic waste
because of the fear that sensitive data may be compromised. Able IT
Logistics understands this very real concern and we ensure that all data
is removed entirely from your electronic waste before it is recycled.
Certificate of Destruction
For your peace of mind, we issue a Certificate of Destruction as proof
that any data stored within your electronic waste has been 100% destroyed
before it reaches our e-waste recycling facility.
Able IT Logistics is an established company
that specialises in the safe disposal of all electronics & IT Equipment-
We can remove computers, telecom systems and all associated electronics
equipment, providing Data Destruction Certificates-
This equipment is then recycled rather than used as landfill, thus
ensuring we are conserving the environment in which we live. The
electronic equipment contains various metals, if only in small quantities,
most common being Steel, Copper, Gold & Aluminium.
Our full service provision includes:
Electronics Removal & Disposal
Waste Management
SAFE & SECURE DATA DESTRUCTION
Confidential Removal & Destruction
Rebuild & Resale of IT Related Products.
We are also Out Of Hours Specialists and cover the whole of the UK.
Our Range of Services include...
We are an electronics recycling company that
takes protecting the environment and your company's security seriously.
Our mission is to provide our customers with affordable alternatives to
landfill disposal, worry free data security, and reliable customer
service.
We follow a strict NO LANDFILL policy both internally and externally. We
value each and every customer as if they were our first. We have a formal
environmental management system, ensuring that we meet environmental
quality standards for all portions of our operation.
Able IT Logistics Limited is an insured, privately owned and operated
corporation that provides electronics recycling services to both
residential and commercial customers.
At Able IT Logistics we maintain strict environmental and social
standards.
We recycle
* Computers
* Monitors
* IT Equipment
* and all other electronic devices
We provide a UK coverage - and collect and
dispose of Computer Hardware (or any type of e-waste) to UK Standards,
providing certificates of authenticated disposal and recycling.
UK
COMPUTER DISPOSALS.co.uk
