Retire data-bearing equipment with a documented plan for the information it contains. ecoTech provides media sanitization and destruction services that connect secure handling, the selected processing method and the records your organization requires.
Define the data outcome before equipment moves
Stored information needs attention throughout retirement, including the time between removal from service and final processing. We work with your team to identify the media, establish custody arrangements and agree on the required outcome before collection.
We provide on-site and off-site shredding, as well as virtual and physical sanitization techniques selected for the media and customer requirements. Tell us about security restrictions, witnessing needs and project locations so we can confirm the appropriate service arrangement.
Hard drives, SSDs and other data-bearing media
Media requiring review can include:
- Hard disk drives removed from desktops, laptops and servers
- Solid-state drives, including drives within enterprise systems
- Flash drives and other common solid-state storage media
- Storage within phones, tablets and selected office equipment
- Other media identified during project scoping
Include devices with missing labels, damaged media or inaccessible storage in the initial discussion. An unreadable device still needs an approved disposition decision. For a broader refresh, this work can be integrated into IT asset disposition and value recovery.
Choose a method that fits the media and the risk
A security policy, the type and condition of the media, and the intended next use all influence method selection. Sanitization may allow eligible equipment to be reused. Physical destruction is appropriate where required by the approved policy or processing plan.
The current NIST SP 800-88 Guidelines for Media Sanitization support a risk-based sanitization program. The reference is a guide for defining requirements; your scope should specify the method and evidence needed for the actual media involved.
We also agree on what happens when a device cannot complete the selected process. Exceptions should be resolved through an authorized next step before the asset is released into a reuse or recycling route.
Connect destruction records to the equipment retired
ecoTech provides Certificates of Destruction for completed destruction services. The supporting detail should be agreed before work begins. We track serial numbers for virtually sanitized devices, with serial tracking for physical destruction available on request.
Useful project requirements include:
- The identifiers used to match devices to your asset records
- The custody and handoff records required at each stage
- The processing method and completion records to be supplied
- The treatment of missing identifiers, failures and discrepancies
- The recipients and format of the final documentation
Organizations in healthcare and financial services can bring their privacy and vendor requirements into the scope. Large infrastructure projects can combine these services with data center decommissioning.
Questions about secure data destruction
Can destruction take place at our location?
On-site services are available subject to the project requirements, equipment, site access and scheduling. Describe any requirement for the media to remain on your premises until destruction so it can be addressed in the service plan.
Does deleting files satisfy a media destruction requirement?
File deletion alone should not be treated as evidence that the media has completed an approved sanitization process. Establish the required outcome with your information-security team and specify how successful processing will be verified and documented.
What happens to equipment after the data work?
Its next destination follows the agreed disposition plan. Suitable equipment may be evaluated for reuse after successful sanitization. Destroyed media and equipment designated for material recovery proceed through the appropriate recycling route.
Scope your data-security requirements
Talk with ecoTech about your media, approximate quantities, locations and required documentation. We will help define the work before equipment leaves your control.