Every company, across all industries, faces the risk of data breaches, identity theft, and business fraud because of the presence of data on retired digital assets. In fact, 40% of tested IT equipment still contains personally identifiable information (PII) of the original owners of the hardware according to the National Association for Information Destruction (NAID). The unintentional mismanagement of critical company and personal data stored within company managed electronics put your company at risk for damage to your brand and reputation; loss or theft of intellectual property and critical customer information; compliance and privacy law fines; and even criminal charges.
Understanding the gravity of these concerns, United Electronic Recycling has developed hard drive shredding procedures using the highest level of compliance that guarantees the permanent destruction of your data. Your company can rely on UER’s Data Destruction management process to be your solution, ensuring that all data is destroyed and irrecoverable, adhering to top industry standards, and include required documentation for regulatory and corporate compliance. Upon completion, you will be provided with a Certificate of Destruction ensuring your full compliance with state and federal privacy laws including FACTAA and HIPAA.
UER’s Data Destruction Process
Department of Defense Level 3 Data Erasure standard – UER utilizes the DoD 5220.22-M data sanitization method for Data Erasure. This is a 3-step process writing zeros in every bit position holder, then writing a one in every bit position holder, and finally a random one or zero for the final pass. Erasing a hard drive using this DoD sanitization method prevents all software-based file recovery methods from lifting data off the hard drive. The sanitization method was originally defined by the US National Industrial Security Program (NISP) in the National Industrial Security Program Operating Manual (NISPOM) and is one of the most commonly used processes for destructing data.
Off-site Hard Drive Shredding – UER offers hard drive shredding stored securely via lockbox at the UER facility. Hard drives can be shredded into very small particles which render the platter completely unreadable.
On-site Hard Drive Shredding- For the absolute highest level of security, UER offers on-site data destruction management. This affords our clients the ability to oversee the total destruction of their hard drives, with hard drives never leaving your premises. UER provides On-Site hard drive shredding throughout Texas, Oklahoma, and surrounding states at competitive rates. One-time and ongoing services can be scheduled at your convenience.
Best Practices in Data Security
The best solution of data destruction for your company will depend on the type of media, the sensitivity of the data, and the end-of-life value of your assets. Many companies will attempt to perform data destruction in house, which is typically less time and cost-effective.
Ideally, your chosen company will have on-site capacity for destroying data. This level of service is the most labor-intensive which makes it the highest cost method, but provides the tightest custody chain possible.
It is often more cost-effective to physically ship hardcopy, software, and hardware to a destruction facility. Ideally, your destruction company will provide tracking of your assets and security measures to keep your data safe throughout the destruction process.
Options for Disposal of Digital Data
Data Destruction regulatory standards:
- The Department of Defense Standard (DOD 5220.22M)
- NIT 800-88 Guidelines for Media Sanitization
- The Media Sanitization Guidelines as promoted by the IRS.
The three basic methods of data destruction are readily explained in the IRS’s Media Sanitization Guidelines, which outline the following:
- Clearing information: This is a drive wipe for average-level threats and is the most basic data destruction option offered. This method of erasure usually works well for companies that want to retain or sell their hard drives. It also tends to be the most affordable option.
- Purging information: This is an advanced form of drive wipe for businesses that may experience advanced technology attacks. Security measures are higher and after service, the company should be able to retain hard drives for reuse or resale.
- Destroying the drive: This is the highest level of protection against data theft, as it ensures that absolutely no trace of any information is left behind in the process. All memory is physically shredded, burnt, or smashed. As a result, the drive becomes unusable.
UER provides the highest level of data security services for the protection of your sensitive information. We offer full-service secure data destruction services including hard drive shredding, paper shredding, e-waste recycling and more. To learn more about our services, please schedule an appointment or call us today!