
Data security during equipment disposition is an increasingly scrutinized process. Retired hard drives and electronic media contain sensitive information that if improperly disposed of can lead to data breaches. Failure to properly sanitize hard drives can result in legal fees, fines, leaking of intellectual property, and a tarnished relationship.
ITAMG can help ensure your organization destroys data above or beyond the guidelines of NIST 800-88 and Department of Defense 5220.22-M.
How ITAMG Is Leading The Industry:
ITAMG can help ensure your organization destroys data above or beyond the guidelines of NIST 800-88 and Department of Defense 5220.22-M.
How ITAMG Is Leading The Industry:
- Auditable data destruction reporting and confirmation of disk erasure
- Serial number capture and confirmation for sanitization and physical destruction of media
- ITAMG uses in house background checked labor to collect equipment unless otherwise agreed
- Onsite hard drive shredding and media destruction available
- Certification of destruction and chain of custody documentation provided
- Insured for errors and omissions to protect against a lapse in downstream data security
Failure to destroy data properly could result in:
- Identity theft
- Time in prison
- Federal and/or civil liability
- Exorbitant fines or lawsuits
- Irreparable damage to an organization's reputation
- Loss in consumer confidence
- Decline in revenue and loss of clients
- Leaking of trade secrets and intellectual property
ITAMG DATA DESTRUCTION METHODS ARE PERFORMED IN STRICT ACCORDANCE WITH DEPARTMENT OF DEFENSE (DOD) ERADICATION STANDARDS
The U.S. Department of Defense (DOD) Standards (DOD 5220.22-M, DOD 5220.22-M ECE) is the National Industrial Security Program Operating Manual (NISPOM) that the DOD, Department of Energy, Nuclear Regulatory Commission, and Central Intelligence Agency must use. The DOD 5220.22-M standard is the civilian term given to the terms and policies found in NISPOM. It prescribes methods and standards by which classified data needs to be secured.All ITAMG Practices Are in Accordance With the Following:
- Department of Defense (DOD)
- National Security Agency (NSA)
- National Institute of Standards & Technology (NIST) Special Publication Series 800-88
- National Industrial Security Program (NISP) Operating Manual (DOD 5220.22-M)
- Health Insurance Portability and Accountability Act (HIPAA)
- Sarbanes-Oxley Act of 2002
- Fair and Accurate Credit Transactions Act (FACTA)
- Gramm-Leach-Bliley Act
- Bank Secrecy Act
- Patriot Act of 2002
- Identity Theft and Assumption Deterrence Act
- US Safe Harbor Provisions
- FDA Security Regulations (21 C.F.R. part 11)
- PCI Data Security Standard
- Various state laws
Regulations and Compliance
- RED FLAGS RULE - Under the Red Flags rule all companies or services that regularly permit deferred payments for goods or services must develop a written program that identifies and detects the relevant warning signs - or "red flags" - of identity theft.
- FACTA - The Fair and Accurate Credit Transaction Act is a federal law designed to reduce the risk of consumer fraud and identity theft. It applies to every individual or business and violators run the risk of class action suits and penalties.
- HIPAA - The Health Insurance Portability and Accountability Act is a federal law designed to prevent the abuse of personal health information, including unauthorized access. It is administered by the US Department of Health Services and is enforced by the US Office of Civil Rights.
- Recent Changes to HIPAA - The American Recovery & Reinvestment Act of 2009 (ARRA) includes a section that expands the reach of HIPAA and introduces the first federally mandated data breach notification requirement called The HITECH Act.
- Frequently Asked Questions about HIPAA - Provided by the U.S. Department of Health and Human Services - The Office for Civil Rights.
- Gramm-Leach-Bliley (GLB) Safeguards Rule is enforced by the Federal Trade Commission and requires financial institutions to have a security plan to protect the confidentiality and integrity of personal consumer information.








