|
Privacy and Security Questions |
How does improper computer disposal contribute to privacy and security breaches?
- Old computers should be seen, not as high-tech junk, but as repositories of data
-
Data such as employee medical records, non-public financial
information, corporate financial documents, R&D and security
information all needs to be protected.
-
All data on a computer leaves an electronic footprint that can be
accessed by “undelete” software, forensics software or good hacking
skills.
-
If a system is donated, dumped, or refurbished and resold, this data
remains on the system and can be accessed by those with criminal intent.
-
Identify theft is one of the fastest growing crimes in America, and
improper computer disposal contributes greatly to this problem.
What is the best way to protect data?
- According to government specifications related to GISRA and DITSCAP
security guidelines, the only risk-free solution to protecting data on
old computers is to destroy the hardware, software and data.
-
This results in data evaporation ©, because the hard drive, memory and
CPU are all destroyed, at 3,500 degrees Fahrenheit, by using the
SecureCyber Destruction model.
Why do I need to protect financial data?
- Financial data needs to be protected so that companies can comply with
the Gramm-Leach-Bliley Act, and also for the plain common sense of
protecting people from identity theft and credit card fraud.
Why does employee and customer medical information need to be protected?
- Disclosure of medical information, on any level, without authorization,
constitutes a felony in many states (criminal law), and also violates
HIPAA, which is a strict federal regulation that requires the
protection of non-public medical information of employees or patients.
What evidence do I need to satisfy current privacy and security regulations for the protection of data?
You need certified documentation that the data has been destroyed by any of the following methods:
- Overwriting: In doing this, you must maintain a quality assurance
log that the drive was re-installed and tested and there is no residual
information left on the system.
-
Degaussing: In doing this, you must maintain a quality assurance log
that the drive was re-installed and tested and there is no residual
information left on the system.
-
Destruction: You need to have destruction documentation by serial number of what was destroyed, and when it was destroyed.
|
