Best Practices in IT Asset Disposal in a Rapidly

Evolving IT Infrastructure Landscape

Wylie Burge, CPPMGeneral Dynamics IT

Dan Mattock, LEED GA, CSDSSecuris

Presentation Overview

• IT Asset Disposal from a Contractor’s Perspective

• Best Practices and the Future of ITAD

• Interactive Case Study

ITAD: A Contractor’s Perspective

• Common universal problem

• Hassle factor

• Temptation: Trash It• Illegal in many states• The hidden snare –

DATA!!!!!!

ITAD: A Contractor’s Perspective

• Public Programs– Recycle, Sell, Donate, Trade In

• Retailers: Drop-off Programs

• Manufacturers: Take Back Programs

Don’t forget the DATA element!!!!!!

ITAD: A Contractor’s Perspective

• The Export Issue

• Industry is leading prevention efforts

• Personal/Company

information remains on devices

ITAD: A Contractor’s Perspective

• How do you ensure E-Waste Recyclers are handling used equipment properly?

• Start With Questions

Disclaimer: These questions are just examples and intended to be used as a guide forinformational purposes only.

ITAD: A Contractor’s Perspective

• What are your P&P’s for destroying personal data that remains on the device?

• Note: The Vendor should be able to provide written certification that “ALL” data was destroyed, as well as a record of the method used.

ITAD: A Contractor’s Perspective

• Does the Vendor follow any recognized best practices?

• Who certifies and audits their processes?

• Can the Vendor produce evidence that it has proper facilities, training and equipment?

• What certifications does the Vendor have?

ITAD: A Contractor’s Perspective

• Has the Vendor had any safety violations?

• Does the Vendor send equipment to third party partners? If “Yes,” what are their P&P’s?

• Does the Vendor have strong record keeping practices (shipment records, serial tracking)?

• What % of materials are recycled vs. disposed?

ITAD: A Contractor’s Perspective

The Consequences

The Future of ITAD

The Evolving IT Infrastructure Landscape

The Future of ITADTechnology Evolution

The Future of ITADTechnology Evolution

The Future of ITADEnvironmental Certifications

http://www.r2solutions.org http://www.e-stewards.org

R2:2013 Standard

The Future of ITADData Security Certifications

• Current regulatory environment

• The shortfall with NIST 800-88

http://www.naidonline.org http://www.dla.mil

The Future of ITADProcesses and Procedures

Interactive Case Study

Questions