Table of Contents

1.  Scope 

2.  Definitons 

3.  Media Disposal Policy 

3.1.  Destruction of Electronic Media 

3.2.  Transfer of Electronic Media Within MSC  

3.3.  third party Disposal of msc media 

4.  Roles & Responsibilities 

5.  Non-Compliance 

 

 

 

 

1. Scope

• Hardware such as printers, copiers, desktops, laptops, servers, and network equipment.
• Mobile devices such as Smart Phones or tablet devices
• USB, CD, flash card, smart card or other removable devices or media
• Data Reefer Logger

 

2. Definitons

Removable Media - Devices such as CDs, DVDs, USB drives, Zip disks, diskettes, tapes and smart cards.

Electronic Media - Defined as electronic storage of MSC data and information.

Destruction or Sanitization - Process of physically damaging or cleaning data from a device.

 

3. Media Disposal Policy

The policy addresses the hardware disposal and reuse for MSC media and equipment.  Electronic data may contain sensitive information, including personnel records, and financial data.  Records are destroyed or deleted in accordance with the schedule set forth in the MSC Records Retention Policy.

When disposing of equipment or media, ensure details are stored in a log, whether the destruction is performed in-house or by a vendor.

Destruction Log or Vendor Provided Report:

• Physical Description of Device
• Date Device Destroyed
• Person or Company who performed the disposal
  • Vendor shall provide make and model of destroyed disk drives.

3.1. Destruction of Electronic Media

When disposing of hardware or media, ensure there is no reference to MSC, and that data is deleted.

3.2. Transfer of Electronic Media Within MSC

Electronic media, such as laptops or USB, must be reimaged or sanitized before custody is transferred to new user.

3.3.  Third party Disposal of msc media

Electronic media may be disposed of using certified commercial disposal systems.  Vendors must provide a certificate of destruction, which shall include hardware description and the date of disposal.   

 

4. Roles & Responsibilities

Task	IT  Operations	Vendor
Collection of Media for Disposal	X
Select Vendor for Disposal	X
Reimage Drives for Reuse	X
Destroy or Recycle Materials	X	X
Create Logs of Destroyed Material	X	X
Stored Cert of Destruction and Logs for 2 years	X	X

 

 

 

 

 

 

 

 

 

 

 

 

 

5. Non-Compliance

Employees must adhere to the stated requirements. Any employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.