How to evaluate a data destruction company

How to evaluate a data-destruction company.

If you decide you need to contract with a third-party service to help destroy your data, here are a few questions to consider as you evaluate their services:

1How well does the service understand the various government guidelines or security classifications regarding data destruction?

2Does the company perform data destruction as a primary business, or as an adjunct to what it is doing already (metal recycling)?

3Do you need a certificate of destruction outlining how and when the destruction took place?  If so, can the service provide that for you?

4What process does the company use to ensure a strong chain of custody for your data once it leaves your possession? Does the service ever outsource portions of this work to other subcontractors or third parties?

5Can you observe the destruction of your data while it's in the service's care?

6How does the service recycle any of its final byproducts (if it recycles at all)?

7If it's important for you to know who is handling your data, what background checks and training does the service do, and what confidentiality agreements does it have with its employees?

8How are the service provider's facility and operations secured from unauthorized access?

9Has the service done work for the government before? What references from other clients can it provide?

10Is the service open to spontaneous visits or audits of its operations and facilities?  What independent audits or spot checks does it already perform during the course of business?

11What backup plan, if any, does the facility have to protect your data in the event of an emergency (for example, power going out during destruction)?

12What other logs or reports can the service provide about the destruction process?

13If it's important to you, can the service track asset numbers, serial numbers or other media information, and does it time-stamp its associated destruction activities?

If you decide that you would like to take matters into your own hands, check out what some IT workers have done here.

< Return to main story


Copyright © 2007 IDG Communications, Inc.

The 10 most powerful companies in enterprise networking 2022