Before disposing or re-using, equipment should undergo verification to determine if it contains storage media. If the storage media contains confidential information or materials with copyright, it should be disposed of or the data should be securely deleted, overwritten, or destroyed to prevent retrieval. Guidelines for safely destroying storage media are found in section 7.10, and for information deletion, refer to section 8.10. When disposing of equipment, including reselling or donating to charity, any labels that identify the business or signify classification, ownership, network, or system should be eliminated. If the organization is moving out of premises or leaving a lease agreement, it should consider removing access controls or surveillance equipment. This decision should be based on several indicators, such as the lease agreement’s requirement to restore the building to its original condition, without leaving sensitive data on systems, and the capability to keep using them.
Conformance1
Tools for conforming to standards, goals and processes
